- content => template('ssl/chained.erb'),
- notify => [ Exec['refresh_debian_hashes'], $notify ],
+ ensure => $ssl_ensure,
+ content => template('ssl/crt-chained.erb'),
+ notify => [ $notify ],
+ }
+ if $key {
+ file { "/etc/ssl/private/$name.key":
+ ensure => $ssl_ensure,
+ mode => '0440',
+ group => 'ssl-cert',
+ content => template('ssl/key.erb'),
+ notify => [ $notify ],
+ links => follow,
+ }
+
+ file { "/etc/ssl/private/$name.key-certchain":
+ ensure => $ssl_ensure,
+ mode => '0440',
+ group => 'ssl-cert',
+ content => template('ssl/key-chained.erb'),
+ notify => [ $notify ],
+ links => follow,
+ }