add dedicated website profile for web + downloads

puppet/manifests/site.pp

@@ -51,3 +51,8 @@
   include profiles::base
   include profiles::repo::rpm
 }
+
+node /^website\d+\.[a-z]+\.theforeman\.org$/ {
+  include profiles::base
+  include profiles::website
+}

puppet/modules/profiles/manifests/website.pp

@@ -0,0 +1,25 @@
+# @summary A profile for the machines hosting the website and downloads
+#
+# @param stable
+#   Latest release that users expect
+#
+# @param https
+#   Whether to enable HTTPS. This is typically wanted but can only be enabled
+#   in a 2 pass setup. First Apache needs to run for Letsencrypt to function.
+#   Then Letsencrypt can be enabled. Also useful to turn off in test setups.
+class profiles::website (
+  String[1] $stable,
+  Boolean $https = true,
+) {
+  class { 'web':
+    https => $https,
+  }
+  contain web
+
+  contain web::vhost::downloads
+
+  class { 'web::vhost::web':
+    stable => $stable,
+  }
+  contain web::vhost::web
+}