$shell = '/bin/false',
$manage_user = true,
$ssl = false,
+ $ssl_manage_cert = false,
$listen = '*',
$https_redirect = false,
$canonical = false,
shell => $shell,
}
- if $ssl == true {
- ssl::cert { "$name":
- group => $gid,
- privmode => '0640',
- ensure => $ensure,
- }
-
- ssl::check { "$name":
- file => "/etc/ssl/certs/$name.crt",
- ensure => $ensure,
- }
- }
-
# Legacy configuration
file { [ "${apache::conf_sites}-available/$vhost",
"${apache::conf_sites}-enabled/$vhost" ]:
require => Apache::Site::Config[$name],
}
+ ssl::cert { "$name":
+ group => $gid,
+ privmode => '0640',
+ ensure => $ssl_manage_cert ? {
+ true => present,
+ default => absent,
+ },
+ }
+
if $certbot == true {
certbot::manage { $name:
pre_hook => '/usr/sbin/service apache2 reload',