# Note that the matching is done with re.match()
'.+':
   sunet::server:
      fail2ban: false
      unattended_upgrades: true
      disable_ipv6_privacy: true
      disable_all_local_users: true
      install_scriptherder: true
   sunet::ntp:
      disable_pool_ntp_org: true
      set_servers: [
        "gbg1.ntp.se",
        "mmo1.ntp.se",
        "sth1.ntp.se",
        "svl1.ntp.se",
        "lul1.ntp.se",
      ]
dns-rest-api.sunet.se:
   dns:
   dns::knotdns: