rewritten using ansible instead of puppet