Puppet manifests for a sensible server setup