add node attribute for all hosts that don't use letsencrypt ssl certs

nodes/attributes.py

@@ -22,3 +22,15 @@ def needs_apply(node):
         io.stderr(f'{red("!!!")}  {bold(node.name)}  {e!r}')
 
     return False
+
+
+@node_attribute
+def uses_bw_managed_ssl(node):
+    if not node.has_bundle('nginx'):
+        return False
+
+    for vhost in node.metadata.get('nginx/vhosts', {}).values():
+        if vhost['ssl'] not in (None, False, 'letsencrypt'):
+            return True
+
+    return False