From bfe476f04658572486cc8648760f6e9ce3da637a Mon Sep 17 00:00:00 2001
From: Patrik Holmqvist <pahol@sunet.se>
Date: Thu, 26 Sep 2024 12:13:33 +0200
Subject: [PATCH] Add sunet::server conf to cosmos-rules

---
 global/overlay/etc/puppet/cosmos-rules.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml
index d1b8865..590138a 100644
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@@ -1,6 +1,12 @@
 # Note that the matching is done with re.match()
 .*\.sunet\.se$:
    net:
+   sunet::server:
+      disable_all_local_users: true
+      disable_ipv6_privacy: true
+      fail2ban: true
+      install_scriptherder: true
+      unattended_upgrades: true
 
 '^ns[0-9]?.mnt.se$':
    nameserver: