requester first pass

templates/bashrc

@@ -0,0 +1,5 @@
+export VAULT_TOKEN=<%= @vault_token %>
+export VAULT_ADDR=<%= @vault_addr %>
+export LEXICON_PROVIDER=namecheap
+export LEXICON_NAMECHEAP_USERNAME=<%= @dns_api_username %>
+export LEXICON_NAMECHEAP_TOKEN=$(<%= @vault_bin %> read -field=value /secret/dns_api/token)

templates/domain.epp

@@ -0,0 +1,14 @@
+<%= $acme_script %> \
+--issue \
+<% if $staging { -%>
+--staging \
+--server <%= $staging_url %> \
+<% } else { -%>
+--server <%= $prod_url %>
+<% } -%>
+--dns dns_lexicon \
+--dnssleep 600 \
+<% $domains.each |$d| { -%>
+--domain "<%= $d %>" \
+<% } -%>
+