diff --git a/global/overlay/etc/puppet/cosmos-modules-prod.conf b/global/overlay/etc/puppet/cosmos-modules-prod.conf
new file mode 100644
index 00000000..dde1a3b8
--- /dev/null
+++ b/global/overlay/etc/puppet/cosmos-modules-prod.conf
@@ -0,0 +1,22 @@
+# name source (puppetlabs fq name or git url) upgrade (yes/no)
+#
+concat      https://github.com/SUNET/puppetlabs-concat.git yes eidas-prod-2*
+stdlib      https://github.com/SUNET/puppetlabs-stdlib.git yes eidas-prod-2*
+cosmos      https://github.com/SUNET/puppet-cosmos.git yes eidas-prod-2*
+ufw         https://github.com/SUNET/puppet-module-ufw.git yes eidas-prod-2*
+apt         https://github.com/SUNET/puppetlabs-apt.git yes eidas-prod-2*
+vcsrepo     https://github.com/SUNET/puppetlabs-vcsrepo.git yes eidas-prod-2*
+xinetd      https://github.com/SUNET/puppetlabs-xinetd.git yes eidas-prod-2*
+python      https://github.com/SUNET/puppet-python.git yes eidas-prod-2*
+hiera-gpg   https://github.com/SUNET/hiera-gpg.git yes eidas-prod-2*
+pound       https://github.com/SUNET/puppet-pound.git yes eidas-prod-2*
+augeas      https://github.com/SUNET/puppet-augeas.git yes eidas-prod-2*
+bastion     https://github.com/SUNET/puppet-bastion.git yes eidas-prod-2*
+pyff        https://github.com/SUNET/puppet-pyff.git yes eidas-prod-2*
+dhcp        https://github.com/SUNET/puppetlabs-dhcp.git yes eidas-prod-2*
+varnish     https://github.com/SUNET/puppet-varnish.git yes eidas-prod-2*
+apparmor    https://github.com/SUNET/puppet-apparmor.git yes eidas-prod-2*
+docker      https://github.com/SUNET/garethr-docker.git yes eidas-prod-2*
+sunet       https://github.com/SUNET/puppet-sunet.git yes eidas-prod-2*
+sysctl      https://github.com/SUNET/puppet-sysctl.git yes eidas-prod-2*
+nagioscfg   https://github.com/SUNET/puppet-nagioscfg.git yes eidas-prod-2*