-cookbook_file "/etc/ssl/certs/rapidssl.pem" do
- owner "root"
- group "root"
- mode 0444
- backup false
-end
-
-cookbook_file "/etc/ssl/certs/openstreetmap.pem" do
- owner "root"
- group "root"
- mode 0444
- backup false
-end
-
-file "/etc/ssl/private/openstreetmap.key" do
- owner "root"
- group "ssl-cert"
- mode 0440
- content keys["openstreetmap"].join("\n")
- backup false
+%w[letsencrypt dhparam].each do |certificate|
+ cookbook_file "/etc/ssl/certs/#{certificate}.pem" do
+ owner "root"
+ group "root"
+ mode 0o444
+ backup false
+ end