#
# Common settings for servers running a puppet agent on a RHEL family based server
# RHEL installs are different to Debian installs
# >>> Included File: ../custom_includes/puppet_agent_rhel
#
ADD_SYSTEM_FILE_OWNER=puppet
ALLOW_DIRPERM_SYSTEM=puppet:
#
# Firewalls need to permit outbound traffic on 8140 to contact the puppetserver
TCP_OUTBOUND_SUPPRESS=:8140:Puppet agent outbound to puppet server
#
# Puppet always resets the below two back to group write so we must override
FORCE_PERM_OK=/opt/puppetlabs/puppet/cache/state/transactionstore.yaml:-rw-rw----
FORCE_PERM_OK=/opt/puppetlabs/puppet/cache/state/state.yaml:-rw-rw----
FORCE_PERM_OK=/var/lib/puppet/state/transactionstore.yaml:-rw-rw----
FORCE_PERM_OK=/var/lib/puppet/state/state.yaml:-rw-rw----
