puppet config to deploy a hardened Linux Server