class puppetmaster {

	package { 'puppetmaster':
		ensure => installed,
	}
	file { '/etc/puppet/hiera.yaml':
		source => 'puppet:///modules/puppetmaster/hiera.yaml'
	}

	@ferm::rule { 'dsa-puppet':
		description     => 'Allow puppet access',
		rule            => '&SERVICE_RANGE(tcp, 8140, $HOST_DEBIAN_V4)'
	}
	@ferm::rule { 'dsa-puppet-v6':
		domain          => 'ip6',
		description     => 'Allow puppet access',
		rule            => '&SERVICE_RANGE(tcp, 8140, $HOST_DEBIAN_V6)'
	}

	ssl::service { 'puppet-dashboard.debian.org':
		notify => Service['apache2'],
	}
}