Sorry - I don't quite understand the point in the commit message about why we are using the manifest to add the vhost instead of hieradata. "because the hieradata fails to resolve dependency between certs provided by ss-cert package and same certificates are required by nginx vhost." Is there a typo? Is it worth adding a comment in here, or amending the commit message to clarify?