Allegro Nanu

 
# The configuration file for apply.  Note that this file
# is likely to have unused configuration parameters in it; any parameter that's
# valid anywhere in Puppet can be in any config file, even if it's not used.
# 
# Every section can specify three special parameters: owner, group, and mode.
# These parameters affect the required permissions of any files specified after
# their specification.  Puppet will sometimes use these parameters to check its
# own configured state, so they can be used to make Puppet a bit more self-managing.
# 
# Generated on Thu Dec 22 10:30:21 +0800 2011.
# 
[user]
    # Where Rails-specific logs are sent
    # The default value is '$logdir/rails.log'.
    railslog = $logdir/rails.log
 
    # Whether to automatically migrate the database.
    # dbmigrate = false
 
    # The database password for caching. Only
    # used when networked databases are used.
    # The default value is ''.
    # dbport = 
 
    # The number of database connections for networked
    # databases.  Will be ignored unless the value is a positive integer.
    # The default value is ''.
    # dbconnections = 
 
    # The log level for Rails connections.  The value must be
    # a valid log level within Rails.  Production environments normally use `info`
    # and other environments normally use `debug`.
    # The default value is 'info'.
    # rails_loglevel = info
 
    # The database cache for client configurations.  Used for
    # querying within the language.
    # The default value is '$statedir/clientconfigs.sqlite3'.
    dblocation = $statedir/clientconfigs.sqlite3
 
    # The name of the database to use.
    # The default value is 'puppet'.
    # dbname = puppet
 
    # The database user for caching. Only
    # used when networked databases are used.
    # The default value is 'puppet'.
    # dbuser = puppet
 
    # The database socket location. Only used when networked
    # databases are used.  Will be ignored if the value is an empty string.
    # The default value is ''.
    # dbsocket = 
 
    # The type of database to use.
    # The default value is 'sqlite3'.
    # dbadapter = sqlite3
 
    # The database server for caching. Only
    # used when networked databases are used.
    # The default value is 'localhost'.
    # dbserver = localhost
 
    # The database password for caching. Only
    # used when networked databases are used.
    # The default value is 'puppet'.
    # dbpassword = puppet
 
    # (Deprecated for 'report_server') The server to which to send transaction reports.
    # The default value is '$server'.
    reportserver = $server
 
    # Which port puppet agent listens on.
    # The default value is '8139'.
    # puppetport = 8139
 
    # The server to send facts to.
    # The default value is '$server'.
    inventory_server = $server
 
    # The server to use for certificate
    # authority requests.  It's a separate server because it cannot
    # and does not need to horizontally scale.
    # The default value is '$server'.
    ca_server = $server
 
    # Where puppet agent stores the last run report in yaml format.
    # The default value is '$statedir/last_run_report.yaml'.
    lastrunreport = $statedir/last_run_report.yaml
 
    # The preferred means of serializing
    # ruby instances for passing over the wire.  This won't guarantee that all
    # instances will be serialized using this method, since not all classes
    # can be guaranteed to support this format, but it will be used for all
    # classes that support it.
    # The default value is 'pson'.
    # preferred_serialization_format = pson
 
    # Allow http compression in REST communication with the master.
    # This setting might improve performance for agent -> master communications over slow WANs.
    # Your puppet master needs to support compression (usually by activating some settings in a reverse-proxy
    # in front of the puppet master, which rules out webrick).
    # It is harmless to activate this settings if your master doesn't support
    # compression, but if it supports it, this setting might reduce performance on high-speed LANs.
    # http_compression = false
 
    # Whether to only use the cached catalog rather than compiling a new catalog
    # on every run.  Puppet can be run with this enabled by default and then selectively
    # disabled when a recompile is desired.
    # use_cached_catalog = false
 
    # Facts that are dynamic; these facts will be ignored when deciding whether
    # changed facts should result in a recompile.  Multiple facts should be
    # comma-separated.
    # The default value is 'memorysize,memoryfree,swapsize,swapfree'.
    # dynamicfacts = memorysize,memoryfree,swapsize,swapfree
 
    # The directory in which client-side YAML data is stored.
    # The default value is '$vardir/client_yaml'.
    clientyamldir = $vardir/client_yaml
 
    # Where FileBucket files are stored locally.
    # The default value is '$vardir/clientbucket'.
    clientbucketdir = $vardir/clientbucket
 
    # The log file for puppet agent.  This is generally not used.
    # The default value is '$logdir/puppetd.log'.
    puppetdlog = $logdir/puppetd.log
 
    # The server to send transaction reports to.
    # The default value is '$server'.
    report_server = $server
 
    # How often puppet agent applies the client configuration; in seconds.
    # Note that a runinterval of 0 means "run continuously" rather than
    # "never run." If you want puppet agent to never run, you should start
    # it with the `--no-client` option.
    # The default value is '1800'.
    runinterval = 300
 
    # The port to communicate with the inventory_server.
    # The default value is '$masterport'.
    inventory_port = $masterport
 
    # The explicit value used for the node name for all requests the agent
    # makes to the master. WARNING: This setting is mutually exclusive with
    # node_name_fact.  Changing this setting also requires changes to the default
    # auth.conf configuration on the Puppet Master.  Please see
    # http://links.puppetlabs.com/node_name_value for more information.
    # The default value is '$certname'.
    node_name_value = $certname
 
    # The port to use for the certificate authority.
    # The default value is '$masterport'.
    ca_port = $masterport
 
    # Whether to create dot graph files for the different
    # configuration graphs.  These dot files can be interpreted by tools
    # like OmniGraffle or dot (which is part of ImageMagick).
    # graph = false
 
    # A lock file to temporarily stop puppet agent from doing anything.
    # The default value is '$statedir/puppetdlock'.
    puppetdlockfile = $statedir/puppetdlock
 
    # Ignore cache and always recompile the configuration.  This is
    # useful for testing new configurations, where the local cache may in
    # fact be stale even if the timestamps are up to date - if the facts
    # change or if the server changes.
    # ignorecache = false
 
    # Where puppet agent caches the local configuration.  An
    # extension indicating the cache format is added automatically.
    # The default value is '$statedir/localconfig'.
    localconfig = $statedir/localconfig
 
    # The maximum time to delay before runs.  Defaults to being the same as the
    # run interval.
    # The default value is '$runinterval'.
    splaylimit = $runinterval
 
    # The directory in which serialized data is stored on the client.
    # The default value is '$vardir/client_data'.
    client_datadir = $vardir/client_data
 
    # How long the client should wait for the configuration to be retrieved
    # before considering it a failure.  This can help reduce flapping if too
    # many clients contact the server at one time.
    # The default value is '120'.
    # configtimeout = 120
 
    # Boolean; whether puppet agent should ignore schedules.  This is useful
    # for initial puppet agent runs.
    # ignoreschedules = false
 
    # The port to communicate with the report_server.
    # The default value is '$masterport'.
    report_port = $masterport
 
    # Whether puppet agent should listen for
    # connections.  If this is true, then puppet agent will accept incoming
    # REST API requests, subject to the default ACLs and the ACLs set in
    # the `rest_authconfig` file. Puppet agent can respond usefully to
    # requests on the `run`, `facts`, `certificate`, and `resource` endpoints.
    # listen = false
 
    # Where puppet agent stores the last run report summary in yaml format.
    # The default value is '$statedir/last_run_summary.yaml'.
    lastrunfile = $statedir/last_run_summary.yaml
 
    # The fact name used to determine the node name used for all requests the agent
    # makes to the master. WARNING: This setting is mutually exclusive with
    # node_name_value.  Changing this setting also requires changes to the default
    # auth.conf configuration on the Puppet Master.  Please see
    # http://links.puppetlabs.com/node_name_fact for more information.
    # The default value is ''.
    # node_name_fact = 
 
    # The server to which server puppet agent should connect
    # The default value is 'puppet'.
    server = c1.inanu.net
 
    # (Deprecated for 'preferred_serialization_format') What format to
    # use to dump the catalog.  Only supports 'marshal' and 'yaml'.  Only
    # matters on the client, since it asks the server for a specific format.
    # The default value is ''.
    # catalog_format = 
 
    # The file in which puppet agent stores a list of the classes
    # associated with the retrieved configuration.  Can be loaded in
    # the separate `puppet` executable using the `--loadclasses`
    # option.
    # The default value is '$statedir/classes.txt'.
    classfile = $statedir/classes.txt
 
    # Where to store dot-outputted graphs.
    # The default value is '$statedir/graphs'.
    graphdir = $statedir/graphs
 
    # Whether to use the cached configuration when the remote
    # configuration will not compile.  This option is useful for testing
    # new configurations, where you want to fix the broken configuration
    # rather than reverting to a known-good one.
    # The default value is 'true'.
    # usecacheonfailure = true
 
    # Whether facts should be made all lowercase when sent to the server.
    # downcasefacts = false
 
    # Whether to send reports after every transaction.
    # The default value is 'true'.
    report = true
 
    # Whether puppet agent should be run in noop mode.
    # noop = false
 
    # Where puppet agent and puppet master store state associated
    # with the running configuration.  In the case of puppet master,
    # this file reflects the state discovered through interacting
    # with clients.
    # The default value is '$statedir/state.yaml'.
    statefile = $statedir/state.yaml
 
    # Whether to sleep for a pseudo-random (but consistent) amount of time before
    # a run.
    # splay = false
 
    # The file in which puppet agent stores a list of the resources
    # associated with the retrieved configuration.
    # The default value is '$statedir/resources.txt'.
    resourcefile = $statedir/resources.txt
 
    # Whether log files should always flush to disk.
    # autoflush = false
 
    # Where individual hosts store and look for their private key.
    # The default value is '$privatekeydir/$certname.pem'.
    hostprivkey = $privatekeydir/$certname.pem
 
    # Run the configuration once, rather than as a long-running
    # daemon. This is useful for interactively running puppetd.
    # onetime = false
 
    # What files to ignore when pulling down facts.
    # The default value is '.svn CVS'.
    # factsignore = .svn CVS
 
    # A command to run before every agent run.  If this command returns a non-zero
    # return code, the entire Puppet run will fail.
    # The default value is ''.
    # prerun_command = 
 
    # The maximum allowed UID.  Some platforms use negative UIDs
    # but then ship with tools that do not know how to handle signed ints, so the UIDs show up as
    # huge numbers that can then not be fed back into the system.  This is a hackish way to fail in a
    # slightly more useful way when that happens.
    # The default value is '4294967290'.
    # maximum_uid = 4294967290
 
    # The main Puppet configuration directory.  The default for this parameter is calculated based on the user.  If the process
    # is running as root or the user that Puppet is supposed to run as, it defaults to a system directory, but if it's running as any other user,
    # it defaults to being in the user's home directory.
    # The default value is '/etc/puppet'.
    confdir = /etc/puppet
 
    # Where the host's certificate revocation list can be found.
    # This is distinct from the certificate authority's CRL.
    # The default value is '$ssldir/crl.pem'.
    hostcrl = $ssldir/crl.pem
 
    # The configuration file that defines the rights to the different
    # namespaces and methods.  This can be used as a coarse-grained
    # authorization system for both `puppet agent` and `puppet master`.
    # The default value is '$confdir/namespaceauth.conf'.
    authconfig = $confdir/namespaceauth.conf
 
    # Where to find information about nodes.
    # The default value is 'plain'.
    # node_terminus = plain
 
    # Where Puppet stores dynamic and growing data.  The default for this parameter is calculated specially, like `confdir`_.
    # The default value is '/var/lib/puppet'.
    vardir = /var/lib/puppet
 
    # The `certdnsnames` setting is no longer functional,
    # after CVE-2011-3872. We ignore the value completely.
    # For your own certificate request you can set `dns_alt_names` in the
    # configuration and it will apply locally.  There is no configuration option to
    # set DNS alt names, or any other `subjectAltName` value, for another nodes
    # certificate.
    # Alternately you can use the `--dns_alt_names` command line option to set the
    # labels added while generating your own CSR.
 
    # The default value is ''.
    # certdnsnames = 
 
    # The Puppet log directory.
    # The default value is '$vardir/log'.
    logdir = $vardir/log
 
    # Should usually be the same as the facts terminus
    # The default value is '$facts_terminus'.
    inventory_terminus = facter
 
    # Where SSL certificates are kept.
    # The default value is '$confdir/ssl'.
    ssldir = /etc/puppet/ssl
 
    # What syslog facility to use when logging to
    # syslog.  Syslog has a fixed list of valid facilities, and you must
    # choose one of those; you cannot just make one up.
    # The default value is 'daemon'.
    # syslogfacility = daemon
 
    # The shell search path.  Defaults to whatever is inherited
    # from the parent process.
    # The default value is 'none'.
    # path = none
 
    # Where Puppet should store plugins that it pulls down from the central
    # server.
    # The default value is '$libdir'.
    plugindest = $libdir
 
    # The HTTP proxy port to use for outgoing connections
    # The default value is '3128'.
    # http_proxy_port = 3128
 
    # The private key directory.
    # The default value is '$ssldir/private_keys'.
    privatekeydir = $ssldir/private_keys
 
    # What files to ignore when pulling down plugins.
    # The default value is '.svn CVS .git'.
    # pluginsignore = .svn CVS .git
 
    # Whether to use a queueing system to provide asynchronous database integration.
    # Requires that `puppetqd` be running and that 'PSON' support for ruby be installed.
    # async_storeconfigs = false
 
    # Where individual hosts store and look for their certificate requests.
    # The default value is '$ssldir/csr_$certname.pem'.
    hostcsr = $ssldir/csr_$certname.pem
 
    # An extra search path for Puppet.  This is only useful
    # for those files that Puppet will load on demand, and is only
    # guaranteed to work for those cases.  In fact, the autoload
    # mechanism is responsible for making sure this directory
    # is in Ruby's search path
    # The default value is '$vardir/lib'.
    libdir = $vardir/lib
 
    # From where to retrieve facts.  The standard Puppet `file` type
    # is used for retrieval, so anything that is a valid file source can
    # be used here.
    # The default value is 'puppet://$server/facts/'.
    factsource = puppet://$server/facts/
 
    # How to determine the configuration version.  By default, it will be the
    # time that the configuration is parsed, but you can provide a shell script to override how the
    # version is determined.  The output of this script will be added to every log message in the
    # reports, allowing you to correlate changes on your hosts to the source version on the server.
    # The default value is ''.
    # config_version = 
 
    # Whether to print stack traces on some errors
    # trace = false
 
    # Whether to create the necessary user and group that puppet agent will
    # run as.
    # mkusers = false
 
    # Where individual hosts store and look for their public key.
    # The default value is '$publickeydir/$certname.pem'.
    hostpubkey = $publickeydir/$certname.pem
 
    # A command to run after every agent run.  If this command returns a non-zero
    # return code, the entire Puppet run will be considered to have failed, even though it might have
    # performed work during the normal run.
    # The default value is ''.
    # postrun_command = 
 
    # An external command that can produce node information.  The output
    # must be a YAML dump of a hash, and that hash must have one or both of
    # `classes` and `parameters`, where `classes` is an array and
    # `parameters` is a hash.  For unknown nodes, the commands should
    # exit with a non-zero exit code.
    # This command makes it straightforward to store your node mapping
    # information in other data sources like databases.
    # The default value is 'none'.
    # external_nodes = none
 
    # Whether certificate revocation should be supported by downloading a Certificate Revocation List (CRL)
    # to all clients.  If enabled, CA chaining will almost definitely not work.
    # The default value is 'true'.
    # certificate_revocation = true
 
    # Which arguments to pass to the diff command when printing differences between files.
    # The default value is '-u'.
    # diff_args = -u
 
    # Where to get node catalogs.  This is useful to change if, for instance,
    # you'd like to pre-compile catalogs and store them in memcached or some other easily-accessed store.
    # The default value is 'compiler'.
    # catalog_terminus = compiler
 
    # The comma-separated list of alternative DNS names to use for the local host.
    # When the node generates a CSR for itself, these are added to the request
    # as the desired `subjectAltName` in the certificate: additional DNS labels
    # that the certificate is also valid answering as.
    # This is generally required if you use a non-hostname `certname`, or if you
    # want to use `puppet kick` or `puppet resource -H` and the primary certname
    # does not match the DNS name you use to communicate with the host.
    # This is unnecessary for agents, unless you intend to use them as a server for
    # `puppet kick` or remote `puppet resource` management.
    # It is rarely necessary for servers; it is usually helpful only if you need to
    # have a pool of multiple load balanced masters, or for the same master to
    # respond on two physically separate networks under different names.
 
    # The default value is ''.
    # dns_alt_names = 
 
    # Where the puppet agent web server logs.
    # The default value is '$logdir/http.log'.
    httplog = $logdir/http.log
 
    # The public key directory.
    # The default value is '$ssldir/public_keys'.
    publickeydir = $ssldir/public_keys
 
    # From where to retrieve plugins.  The standard Puppet `file` type
    # is used for retrieval, so anything that is a valid file source can
    # be used here.
    # The default value is 'puppet://$server/plugins'.
    pluginsource = puppet://$server/plugins
 
    # Which type of queue to use for asynchronous processing.
    # The default value is 'stomp'.
    # queue_type = stomp
 
    # Send the process into the background.  This is the default.
    # The default value is 'true'.
    # daemonize = true
 
    # Where the client stores private certificate information.
    # The default value is '$ssldir/private'.
    privatedir = $ssldir/private
 
    # Where Puppet should look for facts.  Multiple directories should
    # be colon-separated, like normal PATH variables.
    # The default value is '$vardir/lib/facter:$vardir/facts'.
    factpath = $vardir/lib/facter:$vardir/facts
 
    # The YAML file containing indirector route configuration.
    # The default value is '$confdir/routes.yaml'.
    route_file = $confdir/routes.yaml
 
    # Where individual hosts store and look for their certificates.
    # The default value is '$certdir/$certname.pem'.
    hostcert = $certdir/$certname.pem
 
    # The directory where Puppet state is stored.  Generally,
    # this directory can be removed without causing harm (although it
    # might result in spurious service restarts).
    # The default value is '$vardir/state'.
    statedir = $vardir/state
 
    # Whether facts should be synced with the central server.
    # factsync = false
 
    # Which diff command to use when printing differences between files.
    # The default value is 'diff'.
    # diff = diff
 
    # Boolean; whether to use the zlib library
    # The default value is 'true'.
    # zlib = true
 
    # Where each client stores the CA certificate.
    # The default value is '$certdir/ca.pem'.
    localcacert = $certdir/ca.pem
 
    # A parameter that can be used in commit
    # hooks, since it enables you to parse-check a single file rather
    # than requiring that all files exist.
    # ignoreimport = false
 
    # Freezes the 'main' class, disallowing any code to be added to it.  This
    # essentially means that you can't have any code outside of a node, class, or definition other
    # than in the site manifest.
    # freeze_main = false
 
    # Whether Puppet should manage the owner, group, and mode of files
    # it uses internally
    # The default value is 'true'.
    # manage_internal_file_permissions = true
 
    # Print the value of a specific configuration parameter.  If a
    # parameter is provided for this, then the value is printed and puppet
    # exits.  Comma-separate multiple values.  For a list of all values,
    # specify 'all'.  This feature is only available in Puppet versions
    # higher than 0.18.4.
    # The default value is ''.
    # configprint = 
 
    # Whether to log and report a contextual diff when files are being replaced.  This causes
    # partial file contents to pass through Puppet's normal logging and reporting system, so this setting should be
    # used with caution if you are sending Puppet's reports to an insecure destination.
    # This feature currently requires the `diff/lcs` Ruby library.
    # show_diff = false
 
    # The name to use when handling certificates.  Defaults
    # to the fully qualified domain name.
    # The default value is 'c1.inanu.net'.
    certname = c1.inanu.net
 
    # The node facts terminus.
    # The default value is 'facter'.
    # facts_terminus = facter
 
    # The certificate directory.
    # The default value is '$ssldir/certs'.
    certdir = $ssldir/certs
 
    # Whether to just print a manifest to stdout and exit.  Only makes
    # sense when used interactively.  Takes into account arguments specified
    # on the CLI.
    # genmanifest = false
 
    # The HTTP proxy host to use for outgoing connections.  Note: You
    # may need to use a FQDN for the server hostname when using a proxy.
    # The default value is 'none'.
    # http_proxy_host = none
 
    # Where Puppet PID files are kept.
    # The default value is '$vardir/run'.
    rundir = $vardir/run
 
    # Where host certificate requests are stored.
    # The default value is '$ssldir/certificate_requests'.
    requestdir = $ssldir/certificate_requests
 
    # Whether plugins should be synced with the central server.
    # pluginsync = false
 
    # Whether to use colors when logging to the console.
    # Valid values are `ansi` (equivalent to `true`), `html` (mostly
    # used during testing with TextMate), and `false`, which produces
    # no color.
    # The default value is 'ansi'.
    # color = ansi
 
    # The minimum time to wait (in seconds) between checking for updates in
    # configuration files.  This timeout determines how quickly Puppet checks whether
    # a file (such as manifests or templates) has changed on disk.
    # The default value is '15'.
    # filetimeout = 15
 
    # Which type of queue to use for asynchronous processing.  If your stomp server requires
    # authentication, you can include it in the URI as long as your stomp client library is at least 1.1.1
    # The default value is 'stomp://localhost:61613/'.
    # queue_source = stomp://localhost:61613/
 
    # Where puppet agent stores the password for its private key.
    # Generally unused.
    # The default value is '$privatedir/password'.
    passfile = $privatedir/password
 
    # Where Puppet should store facts that it pulls down from the central
    # server.
    # The default value is '$vardir/facts/'.
    factdest = $vardir/facts/
 
    # The environment Puppet is running in.  For clients
    # (e.g., `puppet agent`) this determines the environment itself, which
    # is used to find modules and much more.  For servers (i.e., `puppet master`) this provides the default environment for nodes
    # we know nothing about.
    # The default value is 'production'.
    # environment = production
 
    # Boolean; wether storeconfigs store in the database only the facts and exported resources.
    # If true, then storeconfigs performance will be higher and still allow exported/collected
    # resources, but other usage external to Puppet might not work
    # thin_storeconfigs = false
 
    # The directory in which YAML data is stored, usually in a subdirectory.
    # The default value is '$vardir/yaml'.
    yamldir = $vardir/yaml
 
    # Configure the backend terminus used for StoreConfigs.
    # By default, this uses the ActiveRecord store, which directly talks to the
    # database from within the Puppet Master process.
    # The default value is 'active_record'.
    # storeconfigs_backend = active_record
 
    # The directory in which to store reports
    # received from the client.  Each client gets a separate
    # subdirectory.
    # The default value is '$vardir/reports'.
    reportdir = $vardir/reports
 
    # Whether to only search for the complete
    # hostname as it is in the certificate when searching for node information
    # in the catalogs.
    # strict_hostname_checking = false
 
    # Where puppet master logs.  This is generally not used,
    # since syslog is the default log destination.
    # The default value is '$logdir/puppetmaster.log'.
    masterlog = $logdir/puppetmaster.log
 
    # How the puppet master determines the client's identity
    # and sets the 'hostname', 'fqdn' and 'domain' facts for use in the manifest,
    # in particular for determining which 'node' statement applies to the client.
    # Possible values are 'cert' (use the subject's CN in the client's
    # certificate) and 'facter' (use the hostname that the client
    # reported in its facts)
    # The default value is 'cert'.
    # node_name = cert
 
    # The header containing an authenticated
    # client's SSL DN.  Only used with Mongrel.  This header must be set by the proxy
    # to the authenticated client's SSL DN (e.g., `/CN=puppet.puppetlabs.com`).
    # See http://projects.puppetlabs.com/projects/puppet/wiki/Using_Mongrel for more information.
    # The default value is 'HTTP_X_CLIENT_DN'.
    # ssl_client_header = HTTP_X_CLIENT_DN
 
    # The entry-point manifest for puppet master.
    # The default value is '$manifestdir/site.pp'.
    manifest = $manifestdir/site.pp
 
    # The group puppet master should run as.
    # The default value is 'puppet'.
    # group = puppet
 
    # The directory in which serialized data is stored, usually in a subdirectory.
    # The default value is '$vardir/server_data'.
    server_datadir = $vardir/server_data
 
    # The URL used by the http reports processor to send reports
    # The default value is 'http://localhost:3000/reports/upload'.
    # reporturl = http://localhost:3000/reports/upload
 
    # Where the puppet master web server logs.
    # The default value is '$logdir/masterhttp.log'.
    masterhttplog = $logdir/masterhttp.log
 
    # The user puppet master should run as.
    # The default value is 'puppet'.
    # user = puppet
 
    # Where FileBucket files are stored.
    # The default value is '$vardir/bucket'.
    bucketdir = $vardir/bucket
 
    # Whether to store each client's configuration, including catalogs, facts,
    # and related data.  This also enables the import and export of resources in
    # the Puppet language - a mechanism for exchange resources between nodes.
    # By default this uses ActiveRecord and an SQL database to store and query
    # the data; this, in turn, will depend on Rails being available.
    # You can adjust the backend using the storeconfigs_backend setting.
    # storeconfigs = false
 
    # Code to parse directly.  This is essentially only used
    # by `puppet`, and should only be set if you're writing your own Puppet
    # executable
    # The default value is ''.
    # code = 
 
    # The header containing the status
    # message of the client verification. Only used with Mongrel.  This header must be set by the proxy
    # to 'SUCCESS' if the client successfully authenticated, and anything else otherwise.
    # See http://projects.puppetlabs.com/projects/puppet/wiki/Using_Mongrel for more information.
    # The default value is 'HTTP_X_CLIENT_VERIFY'.
    # ssl_client_verify_header = HTTP_X_CLIENT_VERIFY
 
    # The list of reports to generate.  All reports are looked for
    # in `puppet/reports/name.rb`, and multiple report names should be
    # comma-separated (whitespace is okay).
    # The default value is 'store'.
    # reports = store
 
    # Where the fileserver configuration is stored.
    # The default value is '$confdir/fileserver.conf'.
    fileserverconfig = $confdir/fileserver.conf
 
    # Wether the master should function as a certificate authority.
    # The default value is 'true'.
    # ca = true
 
    # Where puppet master looks for its manifests.
    # The default value is '$confdir/manifests'.
    manifestdir = $confdir/manifests
 
    # Which port puppet master listens on.
    # The default value is '8140'.
    # masterport = 8140
 
    # The search path for modules as a list of directories separated by the ':' character.
    # The default value is '$confdir/modules:/usr/share/puppet/modules'.
    modulepath = $confdir/modules:/usr/share/puppet/modules
 
    # The configuration file that defines the rights to the different
    # rest indirections.  This can be used as a fine-grained
    # authorization system for `puppet master`.
    # The default value is '$confdir/auth.conf'.
    rest_authconfig = $confdir/auth.conf
 
    # The default TTL for new certificates; valid values
    # must be an integer, optionally followed by one of the units
    # 'y' (years of 365 days), 'd' (days), 'h' (hours), or
    # 's' (seconds). The unit defaults to seconds. If this parameter
    # is set, ca_days is ignored. Examples are '3600' (one hour)
    # and '1825d', which is the same as '5y' (5 years) 
    # The default value is '5y'.
    # ca_ttl = 5y
 
    # The bit length of keys.
    # The default value is '1024'.
    # keylength = 1024
 
    # The name to use the Certificate Authority certificate.
    # The default value is 'Puppet CA: $certname'.
    ca_name = Puppet CA: c1.inanu.net
 
    # The CA private key.
    # The default value is '$cadir/ca_key.pem'.
    cakey = $cadir/ca_key.pem
 
    # Where the CA stores private certificate information.
    # The default value is '$cadir/private'.
    caprivatedir = $cadir/private
 
    # Where the CA stores the password for the private key
    # The default value is '$caprivatedir/ca.pass'.
    capass = $caprivatedir/ca.pass
 
    # Whether to allow a new certificate
    # request to overwrite an existing certificate.
    # allow_duplicate_certs = false
 
    # The type of hash used in certificates.
    # The default value is 'md5'.
    # ca_md = md5
 
    # A Complete listing of all certificates
    # The default value is '$cadir/inventory.txt'.
    cert_inventory = $cadir/inventory.txt
 
    # The root directory for the certificate authority.
    # The default value is '$ssldir/ca'.
    cadir = $ssldir/ca
 
    # The CA public key.
    # The default value is '$cadir/ca_pub.pem'.
    capub = $cadir/ca_pub.pem
 
    # Where the CA stores certificate requests
    # The default value is '$cadir/requests'.
    csrdir = $cadir/requests
 
    # Where the serial number for certificates is stored.
    # The default value is '$cadir/serial'.
    serial = $cadir/serial
 
    # How long a certificate should be valid.
    # This parameter is deprecated, use ca_ttl instead
    # The default value is ''.
    # ca_days = 
 
    # The bit length of the certificates.
    # The default value is '2048'.
    # req_bits = 2048
 
    # The CA certificate.
    # The default value is '$cadir/ca_crt.pem'.
    cacert = $cadir/ca_crt.pem
 
    # The certificate revocation list (CRL) for the CA. Will be used if present but otherwise ignored.
    # The default value is '$cadir/ca_crl.pem'.
    cacrl = $cadir/ca_crl.pem
 
    # Where the CA stores signed certificates.
    # The default value is '$cadir/signed'.
    signeddir = $cadir/signed
 
    # Whether to enable autosign.  Valid values are true (which
    # autosigns any key request, and is a very bad idea), false (which
    # never autosigns any key request), and the path to a file, which
    # uses that configuration file to determine which keys to sign.
    # The default value is '$confdir/autosign.conf'.
    autosign = $confdir/autosign.conf
 
    # Whether each resource should log when it is
    # being evaluated.  This allows you to interactively see exactly
    # what is being done.
    # evaltrace = false
 
    # Tags to use to find resources.  If this is set, then
    # only resources tagged with the specified tags will be applied.
    # Values must be comma-separated.
    # The default value is ''.
    # tags = 
 
    # Whether to print a transaction summary.
    # summarize = false
 
    # Where to find the sendmail binary with which to send email.
    # The default value is '/usr/sbin/sendmail'.
    # sendmail = /usr/sbin/sendmail
 
    # The 'from' email address for the reports.
    # The default value is 'report@c1.inanu.net'.
    # reportfrom = report@c1.inanu.net
 
    # The mapping between reporting tags and email addresses.
    # The default value is '$confdir/tagmail.conf'.
    tagmap = $confdir/tagmail.conf
 
    # The server through which to send email reports.
    # The default value is 'none'.
    # smtpserver = none
 
    # Whether SSL should be used when searching for nodes.
    # Defaults to false because SSL usually requires certificates
    # to be set up on the client side.
    # ldapssl = false
 
    # The LDAP port.  Only used if `ldapnodes` is enabled.
    # The default value is '389'.
    # ldapport = 389
 
    # The LDAP attributes that should be stacked to arrays by adding
    # the values in all hierarchy elements of the tree.  Values
    # should be comma-separated.
    # The default value is 'puppetvar'.
    # ldapstackedattrs = puppetvar
 
    # The user to use to connect to LDAP.  Must be specified as a
    # full DN.
    # The default value is ''.
    # ldapuser = 
 
    # Whether TLS should be used when searching for nodes.
    # Defaults to false because TLS usually requires certificates
    # to be set up on the client side.
    # ldaptls = false
 
    # The search string used to find an LDAP node.
    # The default value is '(&(objectclass=puppetClient)(cn=%s))'.
    # ldapstring = (&(objectclass=puppetClient)(cn=%s))
 
    # The LDAP attributes to include when querying LDAP for nodes.  All
    # returned attributes are set as variables in the top-level scope.
    # Multiple values should be comma-separated.  The value 'all' returns
    # all attributes.
    # The default value is 'all'.
    # ldapattrs = all
 
    # The password to use to connect to LDAP.
    # The default value is ''.
    # ldappassword = 
 
    # Whether to search for node configurations in LDAP.  See
    # http://projects.puppetlabs.com/projects/puppet/wiki/LDAP_Nodes for more information.
    # ldapnodes = false
 
    # The LDAP server.  Only used if `ldapnodes` is enabled.
    # The default value is 'ldap'.
    # ldapserver = ldap
 
    # The LDAP attributes to use to define Puppet classes.  Values
    # should be comma-separated.
    # The default value is 'puppetclass'.
    # ldapclassattrs = puppetclass
 
    # The attribute to use to define the parent node.
    # The default value is 'parentnode'.
    # ldapparentattr = parentnode
 
    # The search base for LDAP searches.  It's impossible to provide
    # a meaningful default here, although the LDAP libraries might
    # have one already set.  Generally, it should be the 'ou=Hosts'
    # branch under your main directory.
    # The default value is ''.
    # ldapbase = 
 
    # The address a listening server should bind to.  Mongrel servers
    # default to 127.0.0.1 and WEBrick defaults to 0.0.0.0.
    # The default value is ''.
    # bindaddress = 
 
    # The type of server to use.  Currently supported
    # options are webrick and mongrel.  If you use mongrel, you will need
    # a proxy in front of the process or processes, since Mongrel cannot
    # speak SSL.
    # The default value is 'webrick'.
    # servertype = webrick
 
    # The configuration file for apply.
    # The default value is '$confdir/puppet.conf'.
    config = $confdir/puppet.conf
 
    # The pid file
    # The default value is '$rundir/$name.pid'.
    pidfile = $rundir/apply.pid
 
    # How often RRD should expect data.
    # This should match how often the hosts report back to the server.
    # The default value is '$runinterval'.
    rrdinterval = $runinterval
 
    # The directory where RRD database files are stored.
    # Directories for each reporting host will be created under
    # this directory.
    # The default value is '$vardir/rrd'.
    rrddir = $vardir/rrd
 
    # Path to the device config file for puppet device
    # The default value is '$confdir/device.conf'.
    deviceconfig = $confdir/device.conf
 
    # The root directory of devices' $vardir
    # The default value is '$vardir/devices'.
    devicedir = $vardir/devices
 
    # Whether to use lexical scoping (vs. dynamic).
    # lexical = false
 
    # Where Puppet looks for template files.  Can be a list of colon-seperated
    # directories.
    # The default value is '$vardir/templates'.
    templatedir = $vardir/templates
 
    # Document all resources
    # document_all = false
 
    # During an inspect run, whether to archive files whose contents are audited to a file bucket.
    # archive_files = false
 
    # During an inspect run, the file bucket server to archive files to if archive_files is set.
    # The default value is '$server'.
    archive_file_server = puppet
 
    # The url where the puppet couchdb database will be created
    # The default value is 'http://127.0.0.1:5984/puppet'.
    # couchdb_url = http://127.0.0.1:5984/puppet
[master]
    ssl_client_header = SSL_CLIENT_S_DN
    ssl_client_verify_header = SSL_CLIENT_VERIFY