Created by: exarkun
This adds a deployment configuration for PaymentServer (aka "issuer"). It also adds a Let's Encrypt client service to supply PaymentServer with a TLS certificate.
Some further work will be required to get the certificate renewed automatically but since the certificate is good for 90 days we have some time to ignore that ...