+ base::aptrepo { 'security':
+ url => [ 'http://security.debian.org/' ],
+ suite => "${::lsbdistcodename}/updates",
+ components => ['main','contrib','non-free']
+ }
+
+ # ca-certificates is installed by the ssl module
+ if versioncmp($::lsbmajdistrelease, '9') <= 0 {
+ package { 'apt-transport-https':
+ ensure => installed,