define profile::postgresql::master (
  $letsencrypt_host = undef,
  $backup_hosts     = [],
) {
  profile::postgresql::ssl { "/var/lib/postgres/data":
    cert                => "/etc/letsencrypt/live/$letsencrypt_host/cert.pem",
    key                 => "/etc/letsencrypt/live/$letsencrypt_host/privkey.pem",
    require             => Letsencrypt::Certonly[$letsencrypt_host],
    handle_config_entry => true,
  }

  $backup_hosts.each |$backup_host| {
    profile::postgresql::replication { $backup_host:
      handle_config => true,
      handle_role   => true,
      handle_slot   => true,
      add_self_role => true,
    }
  }
}