From b78bb18d18bff0700dbf0f9af3f5d5723f905b8f Mon Sep 17 00:00:00 2001
From: Simon Hoenscheid <sh@example42.com>
Date: Mon, 11 Nov 2019 16:30:32 +0100
Subject: [PATCH] move unless into manage_security_corerules

---
 manifests/mod/security.pp | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/manifests/mod/security.pp b/manifests/mod/security.pp
index 5f51bbb45f..683fad0be5 100644
--- a/manifests/mod/security.pp
+++ b/manifests/mod/security.pp
@@ -229,10 +229,10 @@
       require => File[$modsec_dir],
       notify  => Class['apache::service'],
     }
-  }
 
-  # Debian 9 has a different rule setup
-  unless $::operatingsystem == 'SLES' or ($::operatingsystem == 'Debian' and versioncmp($::operatingsystemrelease, '9') >= 0) or ($::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '18.04') >= 0) {
-    apache::security::rule_link { $activated_rules: }
+    # Debian 9 has a different rule setup
+    unless $::operatingsystem == 'SLES' or ($::operatingsystem == 'Debian' and versioncmp($::operatingsystemrelease, '9') >= 0) or ($::operatingsystem == 'Ubuntu' and versioncmp($::operatingsystemrelease, '18.04') >= 0) {
+      apache::security::rule_link { $activated_rules: }
+    }
   }
 }