Minimal class as example

global/overlay/etc/hiera/data/common.yaml

@@ -0,0 +1,8 @@
+sunet_ssh_keys:
+  jocar:
+     key    : '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'
+     name   : 'jocar@sunet.se'
+
+sunetops_ssh_keys:
+  root:
+    - jocar

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -1,3 +1,3 @@
 # Note that the matching is done with re.match()
-'^ns[0-9]?.mnt.se$':
-   nameserver:
+'.+':
+   local_module:

global/overlay/etc/puppet/modules/local_module/manifests/init.pp

@@ -0,0 +1,15 @@
+class local_module {
+  include sunet::tools
+  include sunet::motd
+  include apparmor
+
+  sunet::ssh_keys { 'sunetops':
+    config => safe_hiera('sunetops_ssh_keys', {})
+  }
+
+  # Install on all our modern machines. Focal is the last legacy dist in swamid-ops
+  if $facts['os']['distro']['codename'] != 'focal' {
+    include sunet::rsyslog
+    include sunet::starship
+  }
+}