# top-level
[files]
  path /etc/puppet/files
  allow *.<%= domain %>

[keys]
  path /etc/puppet/files/keys
  allow *.<%= domain %>

# modules
[common]
  path /etc/puppet/modules/common/files
  allow *.<%= domain %>

[puppet]
  path /etc/puppet/modules/puppet/files
  allow *.<%= domain %>