class nodo::utils::security::bitmask (
  $ensure = 'installed',
) {
  file { '/etc/apt/sources.list.d/bitmask.net.list':
    ensure  => $ensure,
    owner   => "root",
    group   => "root",
    mode    => "0644",
    content => "deb http://deb.bitmask.net/debian ${::lsbdistcodename} main\n",
    require => Package['leap-archive-keyring'],
  }

  package { [
    'bitmask',
    'leap-archive-keyring',
  ]:
    ensure  => $ensure,
    require => Apt::Sources_list['bitmask.net.list'],
  }
}