# fileserver.conf 

[files]
path /etc/puppet/files
allow *.lan

[plugins]

allow *.lan

[modules]
allow *.lan



# /etc/puppet/manifests/classes/sudo.pp

class sudo {
package { sudo: ensure => latest }

file { "/etc/sudoers":
owner => root,
group => root,
mode => 440,
source => "puppet://server.lan/config/etc/sudoers",
require => Package["sudo"],
}
}