class roles::nm {
  include apache2
  ssl::service { 'nm.debian.org':
    notify  => Exec['service apache2 reload'],
    key => true,
  }
}