puppet updated puppet.conf after previous commit
don't force group or mode on files in /etc/puppet
make sure zabbix agent exported resources include ip address
consolidate all the zabbix hacks into one tidy class
open Postgresql and DNS up in the firewall (and fix the loading of firewall config)
run the puppet service so nothing falls behind on updates