use stdlib's ensure_resource so the conf directory could be created in another module (prevents dependency cycle)

create directory with the correct mod

Author: davidc

manifests/domain.pp

@@ -159,13 +159,15 @@
     validate_string($domain_account_mail)
   }
 
-  file { "${base_dir}/conf/${domain}":
+  $parent_dir = {
     ensure => directory,
     owner  => root,
     group  => root,
-    mode   => '0644',
+    mode   => '0755',
   }
 
+  ensure_resource('file', "${base_dir}/conf/${domain}", $parent_dir)
+
   if $suppress_getssl_run {
     # Don't run getssl immediately
     $config_notifiers = []