Initial commit; enough to prove concepts at least

was able to bootstrap a complete machine with this, although there's lots
missing yet...

rattail_fabric2/certbot.py

@@ -0,0 +1,66 @@
+# -*- coding: utf-8; -*-
+################################################################################
+#
+#  Rattail -- Retail Software Framework
+#  Copyright © 2010-2018 Lance Edgar
+#
+#  This file is part of Rattail.
+#
+#  Rattail is free software: you can redistribute it and/or modify it under the
+#  terms of the GNU General Public License as published by the Free Software
+#  Foundation, either version 3 of the License, or (at your option) any later
+#  version.
+#
+#  Rattail is distributed in the hope that it will be useful, but WITHOUT ANY
+#  WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+#  FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
+#  details.
+#
+#  You should have received a copy of the GNU General Public License along with
+#  Rattail.  If not, see <http://www.gnu.org/licenses/>.
+#
+################################################################################
+"""
+Fabric library for Let's Encrypt certbot
+"""
+
+from __future__ import unicode_literals, absolute_import
+
+from rattail_fabric2 import apt, exists, get_debian_version
+
+
+def install(c, source=False, service='apache'):
+    """
+    Install the Let's Encrypt certbot utility
+    """
+    if source:
+        if not exists(c, '/usr/local/src/certbot'):
+            c.sudo('git clone https://github.com/certbot/certbot /usr/local/src/certbot')
+        c.sudo('ln --symbolic --force /usr/local/src/certbot/certbot-auto /usr/local/bin/certbot')
+
+    else:
+        version = get_debian_version(c)
+
+        # debian 7 wheezy
+        if 7 <= version < 8:
+            if not exists(c, '/usr/local/src/certbot'):
+                c.sudo('git clone https://github.com/certbot/certbot /usr/local/src/certbot')
+            c.sudo('ln --symbolic --force /usr/local/src/certbot/certbot-auto /usr/local/bin/certbot')
+
+        # debian 8 jessie
+        elif 8 <= version < 9:
+            apt.add_source(c, 'deb http://ftp.debian.org/debian jessie-backports main')
+            apt.install(c, 'python-certbot-apache', target_release='jessie-backports')
+
+        # debian 9 stretch, or later
+        elif version >= 9:
+            if service == 'apache':
+                apt.install(c, 'python-certbot-apache')
+            elif service == 'nginx':
+                apt.install(c, 'python-certbot-nginx')
+            else:
+                raise NotImplementedError("unknown web service: {}".format(service))
+
+        # other..? will have to investigate when this comes up
+        else:
+            raise NotImplementedError("don't know how to install certbot on debian version {}".format(version))