first commit

manifests/public_tmp.pp

+# Override systemd's apache configiuration.
+
+class su_apache::systemd_override (
+  $private_tmp = true
+) {
+
+  systemd::dropin_file { 'apache2.conf':
+    unit    => 'apache2.service',
+    content => template('su_apache/systemd-dropin/apache2.conf.erb'),
+  }
+
+}

templates/systemd-dropin/apache2.conf.erb

+<%-
+  if (@private_tmp) then
+    privatetmp = 'true'
+  else
+    privatetmp = 'false'
+  end
+-%>
+[Service]
+PrivateTmp=<%= privatetmp %>