add flexible group membership

manifests/common.pp

@@ -4,6 +4,7 @@
 class acme_vault::common (
     $user               = $::acme_vault::params::user,
     $group              = $::acme_vault::params::group,
+    $group_members      = $::acme_vault::params::group_members,
     $home_dir           = $::acme_vault::params::home_dir,
     $contact_email      = $::acme_vault::params::contact_email,
     $domains            = $::acme_vault::params::domains,
@@ -40,6 +41,12 @@ class acme_vault::common (
       mode   => '0750',
     }
 
+    group { $group:
+      ensure          => present,
+      members         => $group_members,
+      system          => true,
+    }
+
     # vault module isn't too flexible for install only, just copy in binary
     # would be nice if this worked!
     #class { '::vault::install':

manifests/params.pp

@@ -2,7 +2,8 @@
 class acme_vault::params {
     # settings for acme user
     $user       = 'acme'
-    $group      = 'apache'
+    $group      = 'acme'
+    $group_members      = ['apache']
     $home_dir   = '/home/acme_vault'
     $contact_email = ''
     $domains     = undef