====== Desired State ======

  * handled in puppet (read the puppet config to understand what we are doing)
  * leverages git for revision control
  * remote git repositories (master branch) on config.tombstones (fronted by gitea) are the source of truth
  * cloned to /var/lib/puppet/manifests
  * run from roots crontab