Test with a require

manifests/init.pp

@@ -49,6 +49,7 @@ class openbright (
     ssl_key       => fact("letsencrypt_certs.\"${fact('networking.fqdn')}\".files.key"),
     ssl_protocols => 'TLSv1.3 TLSv1.2',
     ssl_ciphers   => 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384',
+    require       => Profiles::Letsencrypt::Cert[fact('networking.fqdn')],
   }
 
   nginx::resource::location { '/app/':