# Note that the matching is done with re.match()
.*\.sunet\.se$:
   net:
   sunet::server:
      disable_all_local_users: true
      disable_ipv6_privacy: true
      fail2ban: true
      install_scriptherder: true
      unattended_upgrades: true

'^ns[0-9]?.mnt.se$':
   nameserver:

karchive.sunet.se:

pahol-test4.sunet.se:
   sunet::server:

test-das-federator.lab.sunet.se:
   sunet::certbot::acmed: