*****
***** Top-Level Puppet Master puppet.conf
*****
[main]
    logdir = /var/log/puppet
    rundir = /var/run/puppet
    ssldir = $vardir/ssl
    modulepath = /etc/puppet/modules
    dns_alt_names = 'puppetmaster.domain,puppetca.domain'

[agent]
    classfile = $vardir/classes.txt
    localconfig = $vardir/localconfig
    server = <FQDN of this server>

[server]
   # for Passenger
   ssl_client_header = SSL_CLIENT_S_DN
   ssl_client_verify_header = SSL_CLIENT_VERIFY

[master]
    ca = true
    autosign = /etc/puppet/autosign.conf
    node_terminus = exec
    external_nodes = /usr/share/puppet-dashboard/bin/external_node
    reports = store,http
    reporturl = http://linux-dashboard.domain/reports/upload
    storeconfigs = true
    storeconfigs_backend = puppetdb

*****
***** Subordinate Puppet Master puppet.conf
*****
[main]
    logdir = /var/log/puppet
    rundir = /var/run/puppet
    ssldir = $vardir/ssl
    ca_server = puppetca.nwideweb.net
    dns_alt_names = '<FQDN>,puppetmaster.domain'

[agent]
    classfile = $vardir/classes.txt
    localconfig = $vardir/localconfig
    server = <FQDN of top-level master>

[server]
    # for Passenger
    ssl_client_header = SSL_CLIENT_S_DN
    ssl_client_verify_header = SSL_CLIENT_VERIFY

[master]
    ca = false
    reports = store,http
    reporturl = http://linux-dashboard.domain/reports/upload
    node_terminus = exec
    external_nodes = /usr/share/puppet/external_node
    storeconfigs = true
    storeconfigs_backend = puppetdb

*****
***** routes.yaml
*****
---
master:
  facts:
    terminus: puppetdb
    cache: yaml