Open
Description
To not reveal sensitive Data like f.e. the LDAP-Password,
- either wrap the rendered Template in
manifests/vhost.pp
, likeconcat::fragment { "${name}-directories": target => "${priority_real}${filename}.conf", order => 60, content => Sensitive(template('apache/vhost/_directories.erb')), }
concat
is able do handleSensitive
since7.4.0
. - or use EPP instead of ERB, as EPP does handle sensitive Data natively