certs: switch everything to use lets encrypt ca by default, use the tag 'comodo' if using a comodo ca.

1 files changed, 8 insertions, 0 deletions

diff --git a/tags/comodo.json b/tags/comodo.json
new file mode 100644
index 0000000..c602369
--- /dev/null
+++ b/tags/comodo.json
@@ -0,0 +1,8 @@
+//
+// apply this tag to any webapp that uses comodo for the ca.
+//
+{
+  "x509": {
+    "commercial_ca_cert": "= file('cert/comodo_ca.crt')"
+  }
+}