# Note that the matching is done with re.match()
'.+':
   sunet::server:
      fail2ban: false
      unattended_upgrades: true
      disable_ipv6_privacy: true
      disable_all_local_users: true
      install_scriptherder: true
   sunet::ntp:
      disable_pool_ntp_org: true
      set_servers: [
        "gbg1.ntp.se",
        "mmo1.ntp.se",
        "sth1.ntp.se",
        "svl1.ntp.se",
        "lul1.ntp.se",
      ]
dns-rest-api1.sunet.se:
   dns:
   dns::knotdns:
   dns::apache2:
     dnsapiport = '8443'
   sunet::certbot::acmed:
   sunet::baas2:
     nodename: 7B9DBFE1F4D1
     backup_dirs:
       - '/etc/'
       - '/var/'
     exclude_list:
       - '/.../dsmsched.log'
       - '/.../dsmerror.log'