defaults = { 'apt': { 'repos': { 'nginx': { 'key': '573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62', 'items': [ 'deb http://nginx.org/packages/debian buster nginx', ], }, }, 'unattended-upgrades': { 'origins': { 'o=nginx,a=stable,n=buster,l=nginx,c=nginx', }, }, 'packages': { 'nginx': {}, }, }, 'nginx': { 'worker_processes': 4, 'worker_connections': 1000, }, } @metadata_reactor def letsencrypt(metadata): if not node.has_bundle('letsencrypt'): raise DoNotRunAgain domains = {} for domain in metadata.get('nginx/vhosts', {}).keys(): domains[domain] = set() return { 'letsencrypt': { 'domains': domains, 'reload_after': { 'nginx', }, }, }