Puppet profile

crontab.pp

class profile::crontab {

$cronfiles = ['/etc/at.allow', '/etc/crontab']
$crondirs =  ['/etc/cron.hourly']
$remove = ['/etc/cron.deny']

file { $cronfiles:
  ensure        => file,
  owner         => 'root',
  group         => 'root',
  mode          => 'og-rwx',
}

file { $crondirs:
  ensure        => directory,
  owner         => 'root',
  group         => 'root',
  mode          => 'og-rwx',
}

file { $remove:
  ensure        => absent,
}
}

sshserver

class profile::sshserver {

class { 'ssh':
  storeconfigs_enabled => false,
  server_options => {
        'PasswordAuthentication' => 'yes',
        'X11Forwarding' => 'no',
        'MaxAuthTries' => '4',
        'ClientAliveInterval' => '300',
        'Port' => [22,],
        'ClientAliveCountMax' => '0',
        'PermitRootLogin' => 'no',
        'Protocol'      => '2',
        'IgnoreRhosts' => 'yes',
        'Banner' => '/etc/issue.net',
  },
}

}