diff --git a/Vagrantfile b/Vagrantfile
index 3e3d129..c9de586 100644
--- a/Vagrantfile
+++ b/Vagrantfile
@@ -1,978 +1,979 @@
 Vagrant.require_version ">= 2.2.0"
 ENV["LC_ALL"] = "en_US.UTF-8"
 
 # Default configuration for all defines node below
 environment = "staging"
 environment_path = "/tmp/puppet/environments"
 manifest_file = "site.pp"
 manifests_path = "swh-site/manifests"
-puppet_options = "--fileserverconfig=/etc/puppet/fileserver.conf --verbose"  # --debug --trace"
+puppet_options = "--fileserverconfig=/etc/puppet/fileserver.conf --verbose" # --debug --trace"
 puppet_staging_facts = {
   "vagrant_testing" => "1",
   "testing"         => "vagrant",
   "deployment"      => "staging",
   "subnet"          => "vagrant"
 }
 puppet_production_facts = {
   "vagrant_testing" => "1",
   "testing"         => "vagrant",
   "deployment"      => "production",
   "subnet"          => "vagrant"
 }
 puppet_admin_facts = {
   "vagrant_testing" => "1",
   "testing"         => "vagrant",
   "deployment"      => "admin",
   "subnet"          => "vagrant"
 }
 # used to define the local vm template path
 puppet_env_path = ENV["SWH_PUPPET_ENVIRONMENT_HOME"]
 
 # Images/local configuration (libvirt)
 $local_debian10_box = "debian10-20201012-1352"
 $local_debian10_box_url = "file://#{puppet_env_path}/packer/builds/swh-debian-10.6-amd64-20201012-1352.qcow2"
 
 # Images/remote configuration
 $global_debian10_box = "debian10-20201012-1352"
 $global_debian10_box_url = "https://annex.softwareheritage.org/public/isos/libvirt/debian/swh-debian-10.6-amd64-20201012-1352.qcow2"
 
 unless Vagrant.has_plugin?("libvirt")
   $stderr.puts <<-MSG
   vagrant-libvirt plugin is required for this.
   To install: `$ sudo apt install vagrant-libvirt
 MSG
   exit 1
 end
 
 Vagrant.configure("2") do |global_config|
   ################
   ## STAGING
   ################
   global_config.vm.define :"staging-webapp" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "webapp.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.30", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-rp0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "rp0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.20", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-db1" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "db1.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.11", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-storage1" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "storage1.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.41", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-objstorage0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "objstorage0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.110", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-deposit" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "deposit.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.31", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-worker0" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "worker0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.100", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   # indexer worker
   global_config.vm.define :"staging-worker3" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "worker3.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.103", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-scheduler0" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "scheduler0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.50", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-journal0" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "journal0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.70", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-esnode0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "search-esnode0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.80", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-search0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "search0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.90", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-counters0" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "counters0.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.95", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"staging-mirror-test" do |config|
     # config.ssh.insert_key = false
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "mirror-test.internal.staging.swh.network"
     config.vm.network   :private_network, ip: "10.168.130.160", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   ################
   # ADMIN
   ################
   global_config.vm.define :"bojimans" do |config|
     # config.ssh.insert_key = false
 
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "bojimans.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.199", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"pergamon" do |config|
     # config.ssh.insert_key = false
 
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "pergamon.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.29", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
-    config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
+    # As a puppet master, the path is different compared to the other servers
+    config.vm.synced_folder "vagrant/le_certs", "/var/lib/puppet/letsencrypt_exports", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "production"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   ################
   ## PRODUCTION
   ################
   global_config.vm.define :"prod-worker01" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "worker01.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.21", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"esnode1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "esnode1.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.61", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"esnode2" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "esnode2.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.62", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"esnode3" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update        = false
     config.vm.hostname                = "esnode3.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.63", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"logstash" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "logstash0.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.19", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 2048
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"admin-bardo" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "bardo.internal.admin.swh.network"
     config.vm.network   :private_network, ip: "10.168.50.10", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_admin_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"admin-rp1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "rp1.internal.admin.swh.network"
     config.vm.network   :private_network, ip: "10.168.50.20", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_admin_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-webapp1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "webapp1.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.71", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-moma" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "moma.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.31", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-search1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "search1.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.85", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-search-esnode1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "search-esnode1.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.81", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-search-esnode2" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "search-esnode2.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.82", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-search-esnode3" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "search-esnode3.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.83", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 4096
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   global_config.vm.define :"prod-counters1" do |config|
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.hostname                = "counters1.internal.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.95", netmask: "255.255.0.0"
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 1024
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
 
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_production_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 
   ################
   ## MISC
   ################
   global_config.vm.define :test do |config|
     config.ssh.insert_key = false
 
     config.vm.box                     = $global_debian10_box
     config.vm.box_url                 = $global_debian10_box_url
     config.vm.box_check_update = false
     config.vm.hostname                = "test.softwareheritage.org"
     config.vm.network   :private_network, ip: "10.168.100.30", netmask: "255.255.0.0"
     config.vm.network   :private_network, ip: "10.168.101.30", netmask: "255.255.0.0"
     config.vm.network "forwarded_port", guest: 10030, host: 22
 
     config.vm.synced_folder "/tmp/puppet/", "/tmp/puppet", type: 'nfs'
     # ssl certificates share
     config.vm.synced_folder "vagrant/le_certs", "/etc/puppet/le_certs", type: 'nfs'
 
     config.vm.provider :libvirt do |provider|
       provider.memory = 512
       provider.cpus = 2
       # local test run: https://github.com/vagrant-libvirt/vagrant-libvirt/issues/45
       provider.driver = 'kvm'
     end
     config.vm.provision "puppet" do |puppet|
       puppet.environment_path = "#{environment_path}"
       puppet.environment = "#{environment}"
       puppet.hiera_config_path = "#{puppet.environment_path}/#{puppet.environment}/hiera.yaml"
       puppet.manifest_file = "#{manifest_file}"
       puppet.manifests_path = "#{manifests_path}"
       puppet.options = "#{puppet_options}"
       puppet.facter = puppet_staging_facts
       puppet.synced_folder_type = 'nfs'
     end
   end
 end
diff --git a/vagrant/le_certs/annex.softwareheritage.org/cert.pem b/vagrant/le_certs/annex.softwareheritage.org/cert.pem
new file mode 100644
index 0000000..9f9cc08
--- /dev/null
+++ b/vagrant/le_certs/annex.softwareheritage.org/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/annex.softwareheritage.org/chain.pem b/vagrant/le_certs/annex.softwareheritage.org/chain.pem
new file mode 100644
index 0000000..9f9cc08
--- /dev/null
+++ b/vagrant/le_certs/annex.softwareheritage.org/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/annex.softwareheritage.org/fullchain.pem b/vagrant/le_certs/annex.softwareheritage.org/fullchain.pem
new file mode 100644
index 0000000..9f9cc08
--- /dev/null
+++ b/vagrant/le_certs/annex.softwareheritage.org/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/annex.softwareheritage.org/privkey.pem b/vagrant/le_certs/annex.softwareheritage.org/privkey.pem
new file mode 100644
index 0000000..ad08590
--- /dev/null
+++ b/vagrant/le_certs/annex.softwareheritage.org/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/vagrant/le_certs/bitbucket-archive.softwareheritage.org/cert.pem b/vagrant/le_certs/bitbucket-archive.softwareheritage.org/cert.pem
new file mode 100644
index 0000000..e3c6b74
--- /dev/null
+++ b/vagrant/le_certs/bitbucket-archive.softwareheritage.org/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/bitbucket-archive.softwareheritage.org/chain.pem b/vagrant/le_certs/bitbucket-archive.softwareheritage.org/chain.pem
new file mode 100644
index 0000000..e3c6b74
--- /dev/null
+++ b/vagrant/le_certs/bitbucket-archive.softwareheritage.org/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDfTCCAmWgAwIBAgIUdFRDqa6kKt2g8W1h5CuNmkKAa3AwDQYJKoZIhvcNAQEL
+BQAwTjELMAkGA1UEBhMCRlIxDjAMBgNVBAgMBVBhcmlzMS8wLQYDVQQDDCZiaXRi
+dWNrZXQtYXJjaGl2ZS5zb2Z0d2FyZWhlcml0YWdlLm9yZzAeFw0yMTA1MTExNTUy
+MDZaFw0yNDAyMDQxNTUyMDZaME4xCzAJBgNVBAYTAkZSMQ4wDAYDVQQIDAVQYXJp
+czEvMC0GA1UEAwwmYml0YnVja2V0LWFyY2hpdmUuc29mdHdhcmVoZXJpdGFnZS5v
+cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJA7iKzvcVEevR/XO
+xzTbuCi63B2sH04fIQoFKgP/ZN0p+GI+hzwM4moUwakiGURdLIwNiaX1wa1IoFDb
+Ag2ZhOj0Y3xP/ETpPBu967owk5fBY6dMlk1ZeBx0OXTLUyIg/FPKu0oNynuBI95V
+S5JgkvRyAAQ/Ad8ak76wSSqbBPbKdnOWZOxPQ7VZw7vwS6ntr30uQyRZOrqRNP1c
+lxeKZNeXBrLBUN3WzDAD5x5RW2IlBld3jom1O0FOoRUKs58DFASYUCcdOom5+w6S
+k7ygIYaR7AjfKaVN26XJ1msHxS0vep0MnqGqpq/OKaCB2QCmYo8AsEM8vbr/eCCh
+SESJAgMBAAGjUzBRMB0GA1UdDgQWBBQurDwESibbtoEGxJR1fpi61tUz4DAfBgNV
+HSMEGDAWgBQurDwESibbtoEGxJR1fpi61tUz4DAPBgNVHRMBAf8EBTADAQH/MA0G
+CSqGSIb3DQEBCwUAA4IBAQCURhzf+I1VWMbmpZ1rkNAwXFMoaABfaMvXv02MsFHl
+EZrnJ0CvL3y9QyItjefpE8Tmu0Wvfg4kSrKOGxNO0sN+RuKC7xCJ3aUUxhoP216n
+tGDjij7M8Jk/OiEmGw3685C1dmkcLqxYbBy40RybAJEC+6XcgFDbrbGy5yjgAY6j
+DCvgBhuFpFcu9DIELabP9Rzqk0tpCbl+eCEfELM9FYTk7VFUHhFpA3/1kSHvm0Cj
+bKqeHFh9IpjRAeB2W186bdlZNfeK4onxsmtQXJERsu1PpuLW2eba9HSxDmgzQfhq
+GyxA8Gqz7i0qACoRE2Kva0Lev1/N6nXP3q4Zo16kVWTi
+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/bitbucket-archive.softwareheritage.org/fullchain.pem b/vagrant/le_certs/bitbucket-archive.softwareheritage.org/fullchain.pem
new file mode 100644
index 0000000..e3c6b74
--- /dev/null
+++ b/vagrant/le_certs/bitbucket-archive.softwareheritage.org/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/bitbucket-archive.softwareheritage.org/privkey.pem b/vagrant/le_certs/bitbucket-archive.softwareheritage.org/privkey.pem
new file mode 100644
index 0000000..0e42ab8
--- /dev/null
+++ b/vagrant/le_certs/bitbucket-archive.softwareheritage.org/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/vagrant/le_certs/debian.softwareheritage.org/cert.pem b/vagrant/le_certs/debian.softwareheritage.org/cert.pem
new file mode 100644
index 0000000..48b9ac6
--- /dev/null
+++ b/vagrant/le_certs/debian.softwareheritage.org/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/debian.softwareheritage.org/chain.pem b/vagrant/le_certs/debian.softwareheritage.org/chain.pem
new file mode 100644
index 0000000..48b9ac6
--- /dev/null
+++ b/vagrant/le_certs/debian.softwareheritage.org/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/debian.softwareheritage.org/fullchain.pem b/vagrant/le_certs/debian.softwareheritage.org/fullchain.pem
new file mode 100644
index 0000000..48b9ac6
--- /dev/null
+++ b/vagrant/le_certs/debian.softwareheritage.org/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/debian.softwareheritage.org/privkey.pem b/vagrant/le_certs/debian.softwareheritage.org/privkey.pem
new file mode 100644
index 0000000..f9a479f
--- /dev/null
+++ b/vagrant/le_certs/debian.softwareheritage.org/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/vagrant/le_certs/docs.softwareheritage.org/cert.pem b/vagrant/le_certs/docs.softwareheritage.org/cert.pem
new file mode 100644
index 0000000..8e3e243
--- /dev/null
+++ b/vagrant/le_certs/docs.softwareheritage.org/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/docs.softwareheritage.org/chain.pem b/vagrant/le_certs/docs.softwareheritage.org/chain.pem
new file mode 100644
index 0000000..8e3e243
--- /dev/null
+++ b/vagrant/le_certs/docs.softwareheritage.org/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/docs.softwareheritage.org/fullchain.pem b/vagrant/le_certs/docs.softwareheritage.org/fullchain.pem
new file mode 100644
index 0000000..8e3e243
--- /dev/null
+++ b/vagrant/le_certs/docs.softwareheritage.org/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/docs.softwareheritage.org/privkey.pem b/vagrant/le_certs/docs.softwareheritage.org/privkey.pem
new file mode 100644
index 0000000..4f8cfa4
--- /dev/null
+++ b/vagrant/le_certs/docs.softwareheritage.org/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDR4T4Q3/0zN6zB
+imKOpVNQCG6tGBOOP8G7LevhJnTDQYx2aOUwTFFNQAE3/y5EGkLNZVv3rzjNI/s6
+zcWFzBJXXYxbZKXiuBCatG4q9Tsmg9hlDREOZTpj8D7Y8b286R5luv6ot0ZLgQqS
+ekPmqIcG6bWS/Rd6hIgSkr3TaAIvqhNnUjJQZ9Yfl7pPJeGjJBv11JUH9Aw3xgnO
+PECIckCdaZsTBtfeNFDjgeQ3ektdKXBGKkEfkgeq8l98wKsIMZ7V7W6y8hbvy4jz
+oxeO43Ertg82DJeH8hsJxLRI51Tzpc1YKEEVV9Mcibp/T1f/Tz+gt5YQm0qMuiit
+Y0Yrq2hdAgMBAAECggEBALLr8Ht2WGaXagE8tjShIFs0NRX/VnyIQeIOje5NWHE0
+qkgvuGLqTM0saV2Rf6GzOYvcgwCuMiBAMma5EVC03lX4fDVVok2bWRxqARlCIoD9
+GTdcYlQBXDvijdFolLY9jhpvxbWTOKwZgCfLb6NtvF7aUl7SwHdEELS0wHs/Sc3T
+Bg2QqTLLBd453PhLp8XUM0sqySyPUAVimCo893O+vLYbx3TEGXQ1rrIBC5IecRdp
+X8nQytjAS+LjRq4imZmZ3cNIFm2bitPCqAjMfi+PBy37DWi928xdF7xf17cWHRsP
+Fae+O91aOXwrmnUHJeSevvoGLs2TeUFhvN8hvkfIeEECgYEA9SfjNutVQEKH1dPY
+/rhtmw5+Twbm0u0yeavTqohUvm6Np+W860ShksWlmsQaCWUqMe1rcdR5l87k5tTK
+dEKIwGR7+DD1oR8jpmwbbY/uKsFqb3MPUD4+R+GIG6KTaNYWPcXfEntsZWC1S6CX
+Ne4eHrDr9g0uIhrtlG9IwtpL1YUCgYEA2ynlANvwhPDZQnfevg1KDylPKRgiRWmK
+CM3KeoXrfRV7QIKw+6e3qSji2bKsL6Z63w/OLMmzrKYk1SlaetxVitoSHuG5VxKV
+vafLX5CLCCr2BlPb+5KlFExavvE+0QMC7L+fD5d7SIjhpRddVKUifHlC38T0CCfG
+oWFFzpgd8vkCgYAVJ170wzO0+siry77io9lZUtPVT9wlATCkzQ3TnjXpxLJWdX1q
+s55ZgtJ6W0d/3gnZCwqFZPclAUZBIMVjaMZSC5mi3d6kC4LQ/m0TdCLx74SWn1AH
+9Yb8Ptq2v72Gg0qiA+vutVWyHbknEHFbxvM0ZMHHlnWPndE4SK33mkyG3QKBgG/G
++T4r7orPD++/lUIXIwuChRYvceM3Baih1MASp10/ZIItZbij/J7w9GoVn44Z+Zbk
+x8G+Cb5namexVK1OzO4pdI59j3qiRu7YsngGD3LV/m6RvKOdUkZ8/tdd0SzmvUok
+HSrlloITFgqOVRKDuogDjKD2IYQ7TSono2PP3455AoGBALv623Ipd+P8vpn0zJ9I
+VBDkAVkMpqdwpVzhm6v1bA2Qbs15VDv8/sNKHSSN1WfvpjKGgNv1yJC1yveu3Y4F
+te1aOiuDA1juKHRnZlPTzZFKqM7iRVcTopCBAn4BsOwl3y/4EQgrDfE2wzYJ4g6n
+V1q9XMAzO95SzUd1L/o3R2Fs
+-----END PRIVATE KEY-----
diff --git a/vagrant/le_certs/grafana.softwareheritage.org/cert.pem b/vagrant/le_certs/grafana.softwareheritage.org/cert.pem
new file mode 100644
index 0000000..3ecf466
--- /dev/null
+++ b/vagrant/le_certs/grafana.softwareheritage.org/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/grafana.softwareheritage.org/chain.pem b/vagrant/le_certs/grafana.softwareheritage.org/chain.pem
new file mode 100644
index 0000000..3ecf466
--- /dev/null
+++ b/vagrant/le_certs/grafana.softwareheritage.org/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/grafana.softwareheritage.org/fullchain.pem b/vagrant/le_certs/grafana.softwareheritage.org/fullchain.pem
new file mode 100644
index 0000000..3ecf466
--- /dev/null
+++ b/vagrant/le_certs/grafana.softwareheritage.org/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/grafana.softwareheritage.org/privkey.pem b/vagrant/le_certs/grafana.softwareheritage.org/privkey.pem
new file mode 100644
index 0000000..d7ca3b8
--- /dev/null
+++ b/vagrant/le_certs/grafana.softwareheritage.org/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDEytgFLrwYMfYM
+nhL3wLOhnFlxsKoyAJyVpqzVjfd3JEitiNfarlUoGUud/XvpBBoXhKPECmHPll6z
+MrHb5DSdhQVy7ZdR8kQk4OYMEE+FzuBrsKOqP3wsIbeaRa5qOM1HToyUjQuOyXF4
+106lM1iKMI6ZBYoFYob8qGFeZPGnAAmZ/jsFRVAu7IxQtGizB/40dZNaxeaBiN8L
+x/USS6gfrLwmejKtLTDE4ZqAOU5wBxZdDeCFfSvpcvetqO3m279bLPP61W3pk3wd
+O+r38zpnmy2AXIbojGtUlrmBf9+n7XexU2pxR6QzPvG06UeEq6zGWKpWXRYfUBCh
+NbgPq+x3AgMBAAECggEAHPSnwmN1A65eQM8FhXTSOYZS1tqiwEa8w3xJ1AZWki5B
+j18iO6gJGaRXLwD8OXYEDM/UdOT+LVg3yPA9oVg7sa2/9oAlEsat5is9TiscOFkP
+RmkwO72pnKi9ZjK4jiKbedGB992lBLZ5PsmXZdFfRr4MTVG2VEKCEC0KXqRFtkeV
+7VkBIcO3scSf8rhxYqTzS93Vv1teBWDjsptGJhlYQ+4H+lyOTETmUhZVS+U9yKQY
+YJ+fhYCPt5zt1uOTHHFWxRnNBkhIYcNsMk85ZxT1470bm8GDjKhbgr9LYcDgY7Ch
+8i0Ljj3x/sQIFykYvIVrvwFnXmFyFEExYmO6nmV4WQKBgQDwTxBNrpmA5AUril3H
+wYPkC9cwOP/h4kyruKDn5jlJ1BLZmZYlU7acB+VtNFiA3FKY16DOrPc9tWCdV7Qa
+E9bqSByZZ/ptWf0yNt8RWD99khs3qwldBtV2YM/f6TlkadmlJq47YZe7xePO60Mp
+/tMpNvo/ZpROdqTk++uvnY51FQKBgQDRpF7gBIlP4IS77jqymGmwUVAbr9PW4xEq
+IEmtHMsvI6ONAMi+WRYXP1Ey/4M0RE3NmMC3xBRGEmRYzQMVZZO7ta4mfBiMfi1L
+GgNx5MUMKqpEqD5XkNpJlW5jsenhCcBQF0ulN7wB5OZbK4aGtxZxVkK37k10EWRu
+KKvIFzaWWwKBgQC/EG3LBdaAt0sxCit0JnWB/LQUYE16wJ3rLrmoh9Dm1VpDbq0F
+cqDPQCv2/tabZhG5+j+d88IEa1Cs6U2GKl4HGly60AQ5q4H3yc7kEIEyitdfFHs2
+XrecDm9Y/Ssnnk1w1OdUyUyF/Foba8yT+ErWCyM/A4VJOWXztiT3FVNt3QKBgQDR
+WQgZQs5wQq+qD8Lz9/mKxhhuHY45B3VrkOSiB5/rSfaX5xGP69yAiI0olTnLZu4f
+AoxotljchJ9KgiezJUV67HmlGsVU/udyGN8ZzC7t8GkpuKzQuukRFDUxP0hjnl46
+XJkAuwB3D8LthjCHtKunsFFd5Y3Y+0lELD8mx++OAwKBgQCN4d1VbEUrUihvqHVV
+SujxiicCbUBwJTDRgmJe2k/1HsE6PlPFD7FYxEIBmeRYqI9cN+UAYazm+/i2eJPo
+o8utkQI1EVpXez5199Gaiu0TxfvbSTPUmT3kratnBX8Bmsjc3KyVKWiQifLaBF3b
+zem0h2SIaWF6e+1As2SNLRPUzA==
+-----END PRIVATE KEY-----
diff --git a/vagrant/le_certs/icinga.softwareheritage.org/cert.pem b/vagrant/le_certs/icinga.softwareheritage.org/cert.pem
new file mode 100644
index 0000000..784dac5
--- /dev/null
+++ b/vagrant/le_certs/icinga.softwareheritage.org/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDZzCCAk+gAwIBAgIUX1AmZP4j/Jkt3dN5BlLFgQ6j0m8wDQYJKoZIhvcNAQEL
+BQAwQzELMAkGA1UEBhMCRlIxDjAMBgNVBAgMBVBhcmlzMSQwIgYDVQQDDBtpY2lu
+Z2Euc29mdHdhcmVoZXJpdGFnZS5vcmcwHhcNMjEwNTExMTU1MTAwWhcNMjQwMjA0
+MTU1MTAwWjBDMQswCQYDVQQGEwJGUjEOMAwGA1UECAwFUGFyaXMxJDAiBgNVBAMM
+G2ljaW5nYS5zb2Z0d2FyZWhlcml0YWdlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQAD
+ggEPADCCAQoCggEBALcC+liJ838dqTAkJ3fBMr7FxX9TFEAUcWppt5/mXDQOddxr
+4ckIeh6hEmjrx/pPzZ+DDOScZeTmzkNjiRwOFx8NCwXKEPgAR6YBukuxXOKzvVK2
+9h/vruTLHbrjRXoawFYKnCMRoGmXmyTix8CCbP1enC/aQFhXOKWWfwKbKtwpPVYz
+W+9MXcfqYoOAF4RVBRABXHCGuAoXmAUCN4BMYHRfvkmQ3hFFaLd+NHVNSyZ9Rw37
+hvzFcXkZsNa1oNakKylVu5SPwx97l96JMrwNAfD2lwAwKTWZdIkEdf5FvvJTwAdc
+3p6ch8mejf0bim2mMW8M04ZleBFTX9WwVLX4ZQcCAwEAAaNTMFEwHQYDVR0OBBYE
+FI58dOrt0gGjCfVICcnRmHtoPpQYMB8GA1UdIwQYMBaAFI58dOrt0gGjCfVICcnR
+mHtoPpQYMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAGCfT36v
+dxmMoOnqIt76hQ4n91OUUiaxZIYqfzG7ledZjA/xzhtOHYrH2e5yVd+av4ajM2LD
+8KLdSFkUPR3+V0ezNTodgdkNw+eXv7wiZ2DOnpzdgPMsHRK+8q4qnHupNO6Qx7ZR
+2BuTZePA9RwHqIDzUw9eNx7v1pXXuppT99vZYyah32+RS+VJvfJ7nOFHl0+fvxHM
+RxkmSiB9g176NPdpXMfN18H6k5WxFlGf3EkBlDDzL/RvyPaR+6afCiOAepn2PZWu
+7VaWsaAtxRtpgpw3bhRQkzHzOfgTEVon0vdEOjweYquH7cq2AUuzkpUnWLTE+iCe
+yhYYjo1/XZJPhKw=
+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/icinga.softwareheritage.org/chain.pem b/vagrant/le_certs/icinga.softwareheritage.org/chain.pem
new file mode 100644
index 0000000..784dac5
--- /dev/null
+++ b/vagrant/le_certs/icinga.softwareheritage.org/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDZzCCAk+gAwIBAgIUX1AmZP4j/Jkt3dN5BlLFgQ6j0m8wDQYJKoZIhvcNAQEL
+BQAwQzELMAkGA1UEBhMCRlIxDjAMBgNVBAgMBVBhcmlzMSQwIgYDVQQDDBtpY2lu
+Z2Euc29mdHdhcmVoZXJpdGFnZS5vcmcwHhcNMjEwNTExMTU1MTAwWhcNMjQwMjA0
+MTU1MTAwWjBDMQswCQYDVQQGEwJGUjEOMAwGA1UECAwFUGFyaXMxJDAiBgNVBAMM
+G2ljaW5nYS5zb2Z0d2FyZWhlcml0YWdlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQAD
+ggEPADCCAQoCggEBALcC+liJ838dqTAkJ3fBMr7FxX9TFEAUcWppt5/mXDQOddxr
+4ckIeh6hEmjrx/pPzZ+DDOScZeTmzkNjiRwOFx8NCwXKEPgAR6YBukuxXOKzvVK2
+9h/vruTLHbrjRXoawFYKnCMRoGmXmyTix8CCbP1enC/aQFhXOKWWfwKbKtwpPVYz
+W+9MXcfqYoOAF4RVBRABXHCGuAoXmAUCN4BMYHRfvkmQ3hFFaLd+NHVNSyZ9Rw37
+hvzFcXkZsNa1oNakKylVu5SPwx97l96JMrwNAfD2lwAwKTWZdIkEdf5FvvJTwAdc
+3p6ch8mejf0bim2mMW8M04ZleBFTX9WwVLX4ZQcCAwEAAaNTMFEwHQYDVR0OBBYE
+FI58dOrt0gGjCfVICcnRmHtoPpQYMB8GA1UdIwQYMBaAFI58dOrt0gGjCfVICcnR
+mHtoPpQYMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAGCfT36v
+dxmMoOnqIt76hQ4n91OUUiaxZIYqfzG7ledZjA/xzhtOHYrH2e5yVd+av4ajM2LD
+8KLdSFkUPR3+V0ezNTodgdkNw+eXv7wiZ2DOnpzdgPMsHRK+8q4qnHupNO6Qx7ZR
+2BuTZePA9RwHqIDzUw9eNx7v1pXXuppT99vZYyah32+RS+VJvfJ7nOFHl0+fvxHM
+RxkmSiB9g176NPdpXMfN18H6k5WxFlGf3EkBlDDzL/RvyPaR+6afCiOAepn2PZWu
+7VaWsaAtxRtpgpw3bhRQkzHzOfgTEVon0vdEOjweYquH7cq2AUuzkpUnWLTE+iCe
+yhYYjo1/XZJPhKw=
+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/icinga.softwareheritage.org/fullchain.pem b/vagrant/le_certs/icinga.softwareheritage.org/fullchain.pem
new file mode 100644
index 0000000..784dac5
--- /dev/null
+++ b/vagrant/le_certs/icinga.softwareheritage.org/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/icinga.softwareheritage.org/privkey.pem b/vagrant/le_certs/icinga.softwareheritage.org/privkey.pem
new file mode 100644
index 0000000..bb8c7f9
--- /dev/null
+++ b/vagrant/le_certs/icinga.softwareheritage.org/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC3AvpYifN/Hakw
+JCd3wTK+xcV/UxRAFHFqabef5lw0DnXca+HJCHoeoRJo68f6T82fgwzknGXk5s5D
+Y4kcDhcfDQsFyhD4AEemAbpLsVzis71StvYf767kyx2640V6GsBWCpwjEaBpl5sk
+4sfAgmz9Xpwv2kBYVzilln8CmyrcKT1WM1vvTF3H6mKDgBeEVQUQAVxwhrgKF5gF
+AjeATGB0X75JkN4RRWi3fjR1TUsmfUcN+4b8xXF5GbDWtaDWpCspVbuUj8Mfe5fe
+iTK8DQHw9pcAMCk1mXSJBHX+Rb7yU8AHXN6enIfJno39G4ptpjFvDNOGZXgRU1/V
+sFS1+GUHAgMBAAECggEAGsb3xD6i/wVi/OU9VRtShnE/fWq1es7C7XP8Zwv4j7FR
+82dhiN2RqKuemvVstCY7CszM9SIhEoXmxhtpM06oeWWaKEWxh+fak+KK1Ipl8dGk
+sNaOWoviRh2mAvM/9ia136D7yXHJy8lf7Ny1p2gt9ECEj8faRFK2uhu0B7iWY9Hx
+fyfN4ja0TDmw/NadARQlHJR2fQNT5Vc6LfHM1EifC9TxSvWYgMbijwTOugf1UcIS
+JYc/6DvZFTUxCG8vnH3e9jCTogeJloRoKhEdq0mFhyLoQVyPCiwU+o5TAy0rifmp
+OSh5yc+6q2qKqAWsizuQTGZT4GLHR4YomO9gbVPUOQKBgQDhsaJ9b5kATZuuNQk4
+uhxNqd6O9o+tPXf5oPK/dIPaaT9nHKMbljXNgMkkCTJr9H82WKI7UnjxWz/UCkqa
+eKV7Y+W18wP7e34hxF5KBlO+Gut3sD+U1Z8xWP21RbHgx7Y1ExmNEqULbYrceyrD
+nIoDG8dkLCCUgyu4OdVxhqjrgwKBgQDPlh1ZW+/0St3gQ0MbxlHcMfREeueBvpPU
+0m1sMLGOHuHyGjC0Pboc26/CGMqOoWqXl/ijzoHAxp+uyE0EFG5ZYJZxr3Njhj/d
+rMgOXnH8/Z+1c1GPXO5MTRCdmcpx0zrdSxcpp0Oj5PmOCd/INSRPN59zZDyDz5QE
+AWl+mPHVLQKBgEM+L5F73HQQq1+eAZ9bI++nut2RbIFLHSHM6EZOqrI6RV+tUpN3
+j5Qo2MTZ0KIFeJlykvNlwQ74Bu5gGpYnd/ZpbxlkzDzzMENTRFx9whmT37ALXQY1
+F3cWcpC9sR+toQXzKNu1QGNFQegq8jTRwPToI+Iem55j7nS3Fnb6jf2NAoGBAJKo
+LpH8Nxmzbu/K9XWA9kKH9FgRMM/kMZMRG4dtG3QZ821U/YXJelx7BMAvPaPo/GKf
+VmV8NwVYDmawUmEIgjGY4JDu8KmmpiZZtHkaVpPzJ0tNbpjHgf/cDloZ1gH2xsaj
+D3k5F7uJwJmN9lD+4mkpFfizH2HMXHk7+ikbqvb9AoGBAIOyARWzs11e/Gt0EU+4
+qhOEzJURBsIGmF7mFnFEXJsGr7ss12l11op90LPXx6g6+R1KpN+WzPvS+lqlvDmM
+YgODWUEYoulMdhVD8u59rfIHQDwwl8kseCC0bwrLX8UcMqbmqY5QODyDKqsJxSHC
+A3qdJKnCmMFyJFnFHCteq08M
+-----END PRIVATE KEY-----
diff --git a/vagrant/le_certs/pergamon.internal.softwareheritage.org/cert.pem b/vagrant/le_certs/pergamon.internal.softwareheritage.org/cert.pem
new file mode 100644
index 0000000..72dc9c8
--- /dev/null
+++ b/vagrant/le_certs/pergamon.internal.softwareheritage.org/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/pergamon.internal.softwareheritage.org/chain.pem b/vagrant/le_certs/pergamon.internal.softwareheritage.org/chain.pem
new file mode 100644
index 0000000..72dc9c8
--- /dev/null
+++ b/vagrant/le_certs/pergamon.internal.softwareheritage.org/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/pergamon.internal.softwareheritage.org/fullchain.pem b/vagrant/le_certs/pergamon.internal.softwareheritage.org/fullchain.pem
new file mode 100644
index 0000000..72dc9c8
--- /dev/null
+++ b/vagrant/le_certs/pergamon.internal.softwareheritage.org/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDfTCCAmWgAwIBAgIUPQr3Iza7d8erftG4udB2Eyg3X3AwDQYJKoZIhvcNAQEL
+BQAwTjELMAkGA1UEBhMCRlIxDjAMBgNVBAgMBVBhcmlzMS8wLQYDVQQDDCZwZXJn
+YW1vbi5pbnRlcm5hbC5zb2Z0d2FyZWhlcml0YWdlLm9yZzAeFw0yMTA1MTExNTA4
+MDNaFw0yNDAyMDQxNTA4MDNaME4xCzAJBgNVBAYTAkZSMQ4wDAYDVQQIDAVQYXJp
+czEvMC0GA1UEAwwmcGVyZ2Ftb24uaW50ZXJuYWwuc29mdHdhcmVoZXJpdGFnZS5v
+cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOlBiSbVoQVE3CLBs
+2Vlbtk7SsWER++AO/Z3GOUs/A/KHABIv6nt63HKxUzi8QeuFo0eknN+cr8boHgzs
+HlI2t0NJ/9KY2IjZO7WPJGFbKQqGaQI2+qnDBWrKr2+Fc0rPtsXiTOPvovw/WR4Q
+wTcl3TuIhI6aIdguK1ZGHdrm3Zgr9VSTI3rIgCA0ShGDcVthVp04qPxb+NSibtES
+4NIfspOSzi9EZAvNr2VIiEzlKfssYGEqFwhf0HYR1G3u0Wy1GeRBXJQQlidYyDVw
+KruWy6KULh966QFDZdfyWhpgvF4RxKckaajG7b1MkCnKLdVEhdFIUEQFTX80vGDw
+dOHhAgMBAAGjUzBRMB0GA1UdDgQWBBRnoIMntzk6R2KYjhehkdyyGqefEjAfBgNV
+HSMEGDAWgBRnoIMntzk6R2KYjhehkdyyGqefEjAPBgNVHRMBAf8EBTADAQH/MA0G
+CSqGSIb3DQEBCwUAA4IBAQC8LlRRceMwMYIJcddn/rGlGAa0vc5JM+0gMrr1IOiM
+TvVkckTZCr/U0Qb/0o7pmr+tA3lAghcsEy8TjtbHPqKExs3F43Dlr30K3E/xg2lA
+xRSPJRTRjaWmm6SaWggWxB5rPjTzuk/KZzKP3KnRlEkEphGvWSwN2BYJMnDaPwkn
+RIgRj4h3fC+0JKIvN6q/QMfz7Eac46fWkwUhL0EEt1ZjMeZb9v7V0egxXYrgnGAs
+pzTZHIDslIe57oFBenPqTnYH2kzxw5goKtuM0jU/0OUyEzd30efmG/+N2a0/qZsu
+9r9BO1dWPmszd4RBGHjGmMS+KPtZITUxMILH7j9FCno6
+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/pergamon.internal.softwareheritage.org/privkey.pem b/vagrant/le_certs/pergamon.internal.softwareheritage.org/privkey.pem
new file mode 100644
index 0000000..ea7cef3
--- /dev/null
+++ b/vagrant/le_certs/pergamon.internal.softwareheritage.org/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/vagrant/le_certs/sentry/cert.pem b/vagrant/le_certs/sentry/cert.pem
new file mode 100644
index 0000000..cc2e020
--- /dev/null
+++ b/vagrant/le_certs/sentry/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/sentry/chain.pem b/vagrant/le_certs/sentry/chain.pem
new file mode 100644
index 0000000..cc2e020
--- /dev/null
+++ b/vagrant/le_certs/sentry/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/sentry/fullchain.pem b/vagrant/le_certs/sentry/fullchain.pem
new file mode 100644
index 0000000..cc2e020
--- /dev/null
+++ b/vagrant/le_certs/sentry/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/sentry/privkey.pem b/vagrant/le_certs/sentry/privkey.pem
new file mode 100644
index 0000000..6438152
--- /dev/null
+++ b/vagrant/le_certs/sentry/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCveIokrd8HsSHl
+tVpi4LikLCNYLyRi3qnzyGhdYSP/xza5ls48l0Uz8EmSB0c7ChQQYVKQ5n8QHzZX
+8KUJIr19AkFVOLjEvWL8NlPootPjGu+hSk483+OT38D/UxAeIQ9VB0bYsCNyTwq/
+Rztp5UZqt/+qb2LGvRJMcXY4idnT6CEXIdVw1fJCNNg+f+u8BrmZkDPP0KNlAroN
+b93KovAPlyElWZiNkatTNe52Ei07uW4cAz3qnKDqRxtKQ3krdwFEEPvc5zPKPdSh
+0KYMD8DcWASfvkm56unYYAZG6Pq0ahPDcOglO6etue18N+4/X7Zf3dYbLY0riHW5
+OZFB4EhbAgMBAAECggEACba2jwlBC3/2zGyZsFeYYR5AZqVVclO5PNGfVWwHPiWd
+FfEPQbNuFU38BKV6f/4y1iVNGNBpwE66B2w+9p6BtuXlD/6v29RQIn4vbvV0nWHk
+Wh1u71fFlW4RlRDYF5Lk8mQQu/YkQDO3+JbM5zPWDhpZgOnhofbdiHXPgZnAAUcE
+89+ska1xy5AgBU6H88sQ0LPUwp8KKp5nMp8pf9fwr658tOM7DpVqb7j3SXZCuFdv
+oOrI4NvcvSaW3kFghJJ9gcX9rREuZh9iSKeDuTxM+9D7Doh74DaMz4VEIxORdxN6
+iya7CkRsvSgDXtQtkqpvXQ+b03SZGRENnzjraijtQQKBgQDadXq1QZEGSvMK9MqL
+C4IiXN3aBVueEfpqW7hxnLJ4J2wEfOcMYG/jwzmKLz92UmbKjSUiVKbUcRlSbVZN
+kKuC7zGwTTnsOVR9pKEclkrwhi2ziCEPQB3tdYS2u3UM+vSWPukPCGI3eoq+As6g
+oEShfYAX58QX9sxKrwDOjs0iuQKBgQDNn+pFEFyq+jntpUJp1vkd4uVVqpO6+c0x
+a9WdXGirTY3fK/rguRgccGqJ7T2skRvieYdUoBGg730YZczMWWIRXWAKJVl9PhYw
+UXOIRzIrfquqmXswRACQs/92eJAdhS0ex1Vz/0A/Ql9pswWkEkNMzh3kXtkwgIIe
+CXpWqbyJswKBgByS2SX0GX/1NaztL8DYFIFiHDJ0GPOn7lUTAiD6Ge3VWi+MFrxr
+sLbdxhzo6SgUxxUfOQgwglGvKVy6qFsk3QoXNyyULUtUhFSav+f5UHv9UOT2nTxd
+aoywnlc4VasI+Aze1aT9t7sB8DvCKjygOdnVjHeT/PYVdcse8MATtYkhAoGBAKZI
+eeTb9HR34jyh9fEtXUuj3x3F0a3UsPEUaSzWO/a7ws0E/d6ZEDx/VEixx7wzpL8i
+1CPFRjxFL355ZIKkjb/JKQ9LYPD9Mmhkle9Q0+uEhkJx18MSWvqp9R7TJIga2IAZ
+ZqtlcYk2nX4WvasO8cm8rUOuyCiG47Jyq7JFlSgtAoGAa/afxhku1ViTftKCO9u0
+JO64R2GcX9csxftJDEFk8aY6wO59mEnOUwTaXFzzzu2RR3LLzpu9LerxE/Kjkph0
+GaqPtnlot9KoEa535N53GF8cFD4GqCjK5V85kfax8SGWHKIlZEbAxYGouLDRm5WW
+FG3LURX+kShhVfbloryIJMk=
+-----END PRIVATE KEY-----
diff --git a/vagrant/le_certs/stats_export/cert.pem b/vagrant/le_certs/stats_export/cert.pem
new file mode 100644
index 0000000..a2236f6
--- /dev/null
+++ b/vagrant/le_certs/stats_export/cert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDczCCAlugAwIBAgIUfkTj8osK3iWnFBQD+UqXwXqB3HwwDQYJKoZIhvcNAQEL
+BQAwSTELMAkGA1UEBhMCRlIxDjAMBgNVBAgMBVBhcmlzMSowKAYDVQQDDCFzdGF0
+cy5leHBvcnQuc29mdHdhcmVoZXJpdGFnZS5vcmcwHhcNMjEwNTExMTUzOTUyWhcN
+MjQwMjA0MTUzOTUyWjBJMQswCQYDVQQGEwJGUjEOMAwGA1UECAwFUGFyaXMxKjAo
+BgNVBAMMIXN0YXRzLmV4cG9ydC5zb2Z0d2FyZWhlcml0YWdlLm9yZzCCASIwDQYJ
+KoZIhvcNAQEBBQADggEPADCCAQoCggEBANoaHt8sbtmKdK5/SA+ZF4TbXWq1rvxX
+9aOTjuVU/72ETEctvR8OeVbbMJeDlMN15O+afw4GXtt29VYWlGWoMhcMfu2dRPvZ
+kXnx8t7ET586TtXOxxySGw1zICDIp7et/FlGgUKj7xAYFqr0MX7oDTpy0TzhTpX1
+i6mtIbg6FruapgEjWCJ97ClVoQ51kOTEVzSZz9GmyYvhCh88fNaWhRafmJmUx2PI
+1+YU8rj+yMebgZpW3ppvSWdAto68X465qpABAuCyiKuiTAgO2HJ0oKgjeTSxQFV1
+LAU/2aH5RoQicYSAsg4/dUetKdHEveBOw8PPWHIOuCCAR1cClKsitr8CAwEAAaNT
+MFEwHQYDVR0OBBYEFH1QIbUCqDiAHHONFKlJ47aLkTRrMB8GA1UdIwQYMBaAFH1Q
+IbUCqDiAHHONFKlJ47aLkTRrMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
+BQADggEBADAZF/Z2cOH8/HCqRjgvItaRSPAyQxAIo+C+x7Xvp6r5tFDfQxTrQUww
+FfMChOAMvlIaD4m3QkQsWqdJXWwWM1DIkJYPsXlyzxeYg4ur8VKwD9CgfAvTFiLJ
+r870595Zoe3qJ3D8jSV10E670L6Bo/YJfQAaA9rYf6onAOItv5hBUKZs7zjJ4w/4
+o7XSLhWV00iTj2jomJmRVXAkqyvwq+/Q1D8pqKwKhtgrkJsfemRLQpv1u4XDtwkV
+Dq2uTP1xsnAqxSJ2K7X1P4Zu+VPY1aaYj1tbGL/t9tpBSPlHHSd2qOiEnS28U6nd
+U0AtLEsNIlY+8TwIvM44iAXUOKb2fks=
+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/stats_export/chain.pem b/vagrant/le_certs/stats_export/chain.pem
new file mode 100644
index 0000000..a2236f6
--- /dev/null
+++ b/vagrant/le_certs/stats_export/chain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDczCCAlugAwIBAgIUfkTj8osK3iWnFBQD+UqXwXqB3HwwDQYJKoZIhvcNAQEL
+BQAwSTELMAkGA1UEBhMCRlIxDjAMBgNVBAgMBVBhcmlzMSowKAYDVQQDDCFzdGF0
+cy5leHBvcnQuc29mdHdhcmVoZXJpdGFnZS5vcmcwHhcNMjEwNTExMTUzOTUyWhcN
+MjQwMjA0MTUzOTUyWjBJMQswCQYDVQQGEwJGUjEOMAwGA1UECAwFUGFyaXMxKjAo
+BgNVBAMMIXN0YXRzLmV4cG9ydC5zb2Z0d2FyZWhlcml0YWdlLm9yZzCCASIwDQYJ
+KoZIhvcNAQEBBQADggEPADCCAQoCggEBANoaHt8sbtmKdK5/SA+ZF4TbXWq1rvxX
+9aOTjuVU/72ETEctvR8OeVbbMJeDlMN15O+afw4GXtt29VYWlGWoMhcMfu2dRPvZ
+kXnx8t7ET586TtXOxxySGw1zICDIp7et/FlGgUKj7xAYFqr0MX7oDTpy0TzhTpX1
+i6mtIbg6FruapgEjWCJ97ClVoQ51kOTEVzSZz9GmyYvhCh88fNaWhRafmJmUx2PI
+1+YU8rj+yMebgZpW3ppvSWdAto68X465qpABAuCyiKuiTAgO2HJ0oKgjeTSxQFV1
+LAU/2aH5RoQicYSAsg4/dUetKdHEveBOw8PPWHIOuCCAR1cClKsitr8CAwEAAaNT
+MFEwHQYDVR0OBBYEFH1QIbUCqDiAHHONFKlJ47aLkTRrMB8GA1UdIwQYMBaAFH1Q
+IbUCqDiAHHONFKlJ47aLkTRrMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
+BQADggEBADAZF/Z2cOH8/HCqRjgvItaRSPAyQxAIo+C+x7Xvp6r5tFDfQxTrQUww
+FfMChOAMvlIaD4m3QkQsWqdJXWwWM1DIkJYPsXlyzxeYg4ur8VKwD9CgfAvTFiLJ
+r870595Zoe3qJ3D8jSV10E670L6Bo/YJfQAaA9rYf6onAOItv5hBUKZs7zjJ4w/4
+o7XSLhWV00iTj2jomJmRVXAkqyvwq+/Q1D8pqKwKhtgrkJsfemRLQpv1u4XDtwkV
+Dq2uTP1xsnAqxSJ2K7X1P4Zu+VPY1aaYj1tbGL/t9tpBSPlHHSd2qOiEnS28U6nd
+U0AtLEsNIlY+8TwIvM44iAXUOKb2fks=
+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/stats_export/fullchain.pem b/vagrant/le_certs/stats_export/fullchain.pem
new file mode 100644
index 0000000..a2236f6
--- /dev/null
+++ b/vagrant/le_certs/stats_export/fullchain.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vagrant/le_certs/stats_export/privkey.pem b/vagrant/le_certs/stats_export/privkey.pem
new file mode 100644
index 0000000..4d852c1
--- /dev/null
+++ b/vagrant/le_certs/stats_export/privkey.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----