manifests/init.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

class ssl {
  group { 'ssl-cert':
    ensure => present,
  }

  file { [ "/etc/ssl", "/etc/ssl/certs", "/etc/ssl/private", "/etc/ssl/dhparams" ]:
    ensure  => directory,
    owner   => "root",
    group   => "ssl-cert",
    require => Group['ssl-cert'],
  }

  file { "/usr/local/bin/ssl-cert-check":
    ensure => present,
    owner   => "root",
    group   => "root",
    mode    => 755,
    source  => "puppet://$server/modules/ssl/ssl-cert-check",
  }
}