Yes, that's true - that file should be a template. Some variables should come from the private repository, similar to how we do it with the Trac configuration (see `modules/trac/manifests/init.pp` and `modules/trac/templates/trac.ini.erb`).