dnsextras::tlsa_record{ "tlsa-${sslname}-1873":
zone => 'debian.org',
- certfile => [
- "/etc/puppet/modules/ssl/files/servicecerts/${sslname}.crt",
- "/etc/puppet/modules/ssl/files/from-letsencrypt/${sslname}.crt",
- ],
+ certfile => [ "/srv/puppet.debian.org/from-letsencrypt/${sslname}.crt" ],
port => 1873,
hostname => $sslname,
}