Trying to add SSL Firewall and Monitoring

Al,

  As far as me development environment goes, this seems to be working.  Puppet agent runs on the dev node and applies the firewall update for both 80 and 443 - 

sysconfig/iptables]: Scheduling refresh of Service[iptables]
--- /etc/sysconfig/iptables	2013-07-24 16:24:57.527994714 -0400
+++ /tmp/puppet-file20130724-13260-k1alld-0	2013-07-24 16:45:49.362184821 -0400
@@ -6,6 +6,7 @@
 -A INPUT -p tcp --dport 22 -j ACCEPT
 -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
 -A INPUT -i lo -j ACCEPT 
+  -A INPUT -p tcp --dport 443 -s 0.0.0.0/0 -d 10.0.42.31 -j ACCEPT
   -A INPUT -p tcp --dport 80 -s 0.0.0.0/0 -d 10.0.42.31 -j ACCEPT
   -A INPUT -p tcp --dport 5666 -s 0.0.0.0/0 -d 10.0.42.31 -j ACCEPT
   -A INPUT -p tcp --dport 22 -s 0.0.0.0/0 -d 10.0.42.31 -j ACCEPT

  After making a puppet run on Nagios, I see a failure on tcp_443 (due to network firewall, not puppet/module), so it would appear that works as well -

apache_process 	OK 	2013-07-24 17:00:44 	0d 0h 45m 20s 	1/4 	PROCS OK: 9 processes with command name 'httpd' 
apache_tcp_443 	CRITICAL 	2013-07-24 17:02:54 	0d 0h 16m 10s 	4/4 	CRITICAL - Socket timeout after 10 seconds 
apache_tcp_80 CRITICAL 	2013-07-24 17:05:50 	0d 0h 43m 14s 	4/4 	CRITICAL - Socket timeout after 10 seconds 

  I have a slight problem, I have 5 puppet environments: default, dev, test, production, ops.  At the moment, the only other place I'm running an SSL apache server that Nagios can get to is my Foreman Server in the ops env.  So I cloned my module version into the ops/modules directory and when I do a puppet run I get this:

Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Cannot reassign variable bool_source_dir_purge at /etc/puppet/environments/ops/modules/apache/manifests/init.pp:253 on node foreman.servers.udayton.edu
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run

I'm sure it's something screwy in my environment/module folders, but my changes could use some more testing.