net-ops/global/overlay/etc/puppet/manifests/cosmos-site.pp

# This manifest is managed using cosmos

Exec {
  path => "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
}

# you need a default node

node default {

}

class common {

   include apt
   include sunet::tools
   include sunet::motd
   include sunet::rsyslog

   package {'ssl-cert':
       ensure => present
   }
   package { 'needrestart':
      ensure => installed
  }
}

# infra ca rp class
class infra_ca_rp {
  sunet::ici_ca::rp { 'infra': }
}

# enable automatic updates, and automatic reboots
class autoupdate {
  class { 'sunet::updater': cron => true, cosmos_automatic_reboot => true }
}