#
# Cookbook:: irrigate-haproxy
# Recipe:: certs
#
# Author:: Russell de Moose (<rdemoose@theorchard.com>)
# Copyright:: (C) 2016 The Orchard
#

node['ssl_cert'].each do |_cert_number, cert_item|
  cert_data_bag = data_bag_item('secrets', cert_item['cert_data_bag'])
  my_cert = cert_data_bag['cert'].chomp
  template cert_item['cert_file_location'] do
    source 'ssl_cert.erb'
    owner 'root'
    mode '600'
    notifies :reload, 'service[haproxy]', :immediately
    variables ({
      cert_content: my_cert,
    })
  end
end