Testing stuff for mailgen

global/overlay/etc/puppet/modules/soc/manifests/intelmq.pp

@@ -14,6 +14,7 @@ class soc::intelmq(
     $api_pass = lookup('intelmq_api_user.password', undef, undef, 'pass')
     $db_user = lookup('intelmq_db_user.username', undef, undef, 'test')
     $db_pass = lookup('intelmq_db_user.password', undef, undef, 'pass')
+    $privkey = lookup('gnupg.keyid', undef, undef, undef)
 
     group { 'intelmq':
       ensure => present,
@@ -298,7 +299,22 @@ class soc::intelmq(
       mode    => '0440',
       content => template('soc/intelmq/intelmq-mailgen.conf.erb'),
     ;
+  }
 
+  file { '/opt/intelmq/.gnupg':
+    ensure => directory,
+    owner  => 'intelmq',
+    group  => 'intelmq',
+    mode   => '0700',
+  }
+  if lookup('gnupg.privkey', undef, undef, undef) != undef {
+    sunet::snippets::secret_file { "/opt/intelmq/.gnupg/${privkey}.asc":
+      hiera_key => 'gnupg.privkey'
+    }
+    exec { 'Import private gpg key':
+      command => "sudo -u intelmq /usr/bin/gpg -import /opt/intelmq/.gnupg/${privkey}.asc",
+      unless  => "gpg -K ${privkey} 2>&1 > /dev/null",
+    }
   }
 
   file { '/etc/systemd/system/intelmq-api.service':