diff --git a/global/overlay/etc/puppet/modules/cdn/files/mqtt/sunet-cdn-mqtt b/global/overlay/etc/puppet/modules/cdn/files/mqtt/sunet-cdn-mqtt
index 582c203..3a94601 100755
--- a/global/overlay/etc/puppet/modules/cdn/files/mqtt/sunet-cdn-mqtt
+++ b/global/overlay/etc/puppet/modules/cdn/files/mqtt/sunet-cdn-mqtt
@@ -11,18 +11,18 @@ mosquitto_dir="/etc/mosquitto"
 
 le_chain="$le_dir/chain.pem"
 mosquitto_chain="$mosquitto_dir/ca_certificates/chain.pem"
-cp $le_chain $mosquitto_chain
-chown mosquitto:root $mosquitto_chain
+cp "$le_chain" "$mosquitto_chain"
+chown mosquitto:root "$mosquitto_chain"
 
 le_cert="$le_dir/cert.pem"
 mosquitto_cert="$mosquitto_dir/certs/cert.pem"
-cp $le_cert $mosquitto_cert
-chown mosquitto:root $mosquitto_cert
+cp "$le_cert" "$mosquitto_cert"
+chown mosquitto:root "$mosquitto_cert"
 
 le_key="$le_dir/privkey.pem"
 mosquitto_key="$mosquitto_dir/certs/privkey.pem"
-cp $le_key $mosquitto_key
-chown mosquitto:root $mosquitto_key
+cp "$le_key" "$mosquitto_key"
+chown mosquitto:root "$mosquitto_key"
 
 # Tell mosquitto to reload certs
 pkill -x -HUP mosquitto