# fileserver.conf
[files]
path /etc/puppet/files
allow *.lan
[plugins]
allow *.lan
[modules]
allow *.lan
# /etc/puppet/manifests/classes/sudo.pp
class sudo {
package { sudo: ensure => latest }
file { "/etc/sudoers":
owner => root,
group => root,
mode => 440,
source => "puppet://server.lan/config/etc/sudoers",
require => Package["sudo"],
}
}