- split package/service from config so puppetservers agents can be managed in the same was as clients
- change almalinux and epel *.repo files on nodes to use local package mirror - add option to purge yumrepo resources, default to true - add versionlocking to yum, enable it for puppet-agent
- manage the service - manage the package, version lock it - deploy the /etc/puppetlabs/puppet/puppet.conf from template for puppet clients only