+
+ dnsextras::tlsa_record{ "tlsa-${sslname}-${sslport}":
+ zone => 'debian.org',
+ certfile => [ "/etc/puppet/modules/ssl/files/servicecerts/${sslname}.crt", "/etc/puppet/modules/ssl/files/from-letsencrypt/${sslname}.crt" ],
+ port => $sslport,
+ hostname => "$sslname",
+ }