feat: support letsencrypt_enabled on canonical domain

Add letsencrypt variable (default: true) to control automatic Let's Encrypt
TLS certificate provisioning on the canonical domain. Set to false when
using a custom certificate (e.g. wildcard).

Replaces the outdated comment about unsupported TLS attributes in domains.tf.

Requires scalingo provider ~> 2.7 (letsencrypt_enabled added in v2.3.0).

Author: josephpage

domains.tf

@@ -5,9 +5,7 @@ resource "scalingo_domain" "canonical_domain" {
   canonical   = true
   common_name = var.domain
 
-  # Attributes not supported by the provider on v2.2 :
-  # tlscert - optional: SSL Certificate you want to associate with the domain
-  # tlskey - optional: Private key used to create the SSL certificate
+  letsencrypt_enabled = var.letsencrypt
 }
 
 resource "scalingo_domain" "domain_aliases" {

variables.tf

@@ -157,7 +157,7 @@ variable "addons" {
 # }
 
 variable "domain" {
-  description = "Main domain name of the application, known as \"canonical domain\" in Scalingo's dashboard. Note that SSL configuration must be completed through the dashboard."
+  description = "Main domain name of the application, known as \"canonical domain\" in Scalingo's dashboard."
   type        = string
   default     = null
   nullable    = true
@@ -168,6 +168,13 @@ variable "domain" {
   }
 }
 
+variable "letsencrypt" {
+  description = "Enable Let's Encrypt automatic TLS for the canonical domain. Set to false when using a custom certificate."
+  type        = bool
+  default     = true
+  nullable    = false
+}
+
 variable "domain_aliases" {
   description = "List of others domain names for the application"
   type        = list(string)