Stop purging sites-available as it doesn't make any sense. Enable tls-cache server globally.

manifests/init.pp

@@ -55,7 +55,6 @@ class freeradius (
     "${freeradius::fr_basepath}/certs",
     "${freeradius::fr_basepath}/clients.d",
     "${freeradius::fr_basepath}/sites-enabled",
-    "${freeradius::fr_basepath}/sites-available",
     "${freeradius::fr_basepath}/instantiate",
   ]:
     ensure  => directory,
@@ -74,6 +73,13 @@ class freeradius (
     ensure => absent,
   }
 
+  # Create symlink to enable tls-cache server
+  # This is not harmful to enable globally
+  file { "${freeradius::fr_basepath}/sites-enabled/tls-cache":
+    ensure => link,
+    target => "${freeradius::fr_basepath}/sites-available/tls-cache",
+  }
+
   # Set up concat policy file, as there is only one global policy
   # We also add standard header and footer
   concat { "${freeradius::fr_basepath}/policy.conf":