+ if $key {
+ file { "/etc/ssl/private/$name.key":
+ ensure => $ssl_ensure,
+ mode => '0440',
+ group => 'ssl-cert',
+ source => [ "puppet:///modules/ssl/keys/${name}.crt", "puppet:///modules/ssl/from-letsencrypt/${name}.key" ],
+ notify => [ $notify ],
+ links => follow,
+ }
+
+ file { "/etc/ssl/private/$name.key-certchain":
+ ensure => $ssl_ensure,
+ mode => '0440',
+ group => 'ssl-cert',
+ content => template('ssl/key-chained.erb'),
+ notify => [ $notify ],
+ links => follow,
+ }
+ }