Added SSL encryption to issue tracker configuration

modules/trac/manifests/init.pp

 class trac(
     $domain,
     $is_default = false) inherits private::trac {
   package {['python-mysqldb','python-pip','subversion', 'tofrodos', 'graphviz']:
     ensure => present
   }
 
   include nginx, spawn-fcgi
 
+  file {'/etc/nginx/adblockplus.org_sslcert.key':

[Wladimir Palant, 2014/03/11 12:40:48]

Note that all other servers have this file in /etc/nginx/sites-available where
it doesn't really belong. We should fix it everywhere eventually.

[Felix Dahlke, 2014/03/13 00:32:16]

Sounds like an issue that wants to be filed :)

+    ensure => file,
+    owner => root,
+    mode => 0644,
+    notify => Service['nginx'],
+    before => Nginx::Hostconfig[$domain],
+    require => Package['nginx'],
+    source => 'puppet:///modules/private/adblockplus.org_sslcert.key'
+  }
+
+  file {'/etc/nginx/adblockplus.org_sslcert.pem':
+    ensure => file,
+    owner => root,
+    mode => 0400,
+    notify => Service['nginx'],
+    before => Nginx::Hostconfig[$domain],
+    require => Package['nginx'],
+    source => 'puppet:///modules/private/adblockplus.org_sslcert.pem'
+  }
+
   nginx::hostconfig {$domain:
     content => template('trac/site.erb'),
     enabled => true
   }
 
   user {'trac':
     ensure => present,
     comment => 'User of the trac installation',
     home => '/home/trac',
     managehome => true
@@ skipping 114 matching lines @@
     require => Exec['deploy'],
   }
 
   file {"/home/trac/permissions.csv":
     ensure => present,
     owner => trac,
     source => 'puppet:///modules/trac/permissions.csv'
   }
 
 }