Yes. The following is a list of files that should be modified with appropriate site-specific settings in order to achieve maximum compliance. (all paths are relative to the root of the Puppet manifest directory)
Set the site-specific domain SSL certificates will be signed for.
Put email addresses and appropriate Puppet module tags for which user will receive notifications when actions are taken.
Configure the names of local dns, ntp, and syslog servers here. Note that the $domain variable is set automatically from the local system at runtime.
Contains several global site variables including filebucket which must be set to the Puppet server name.
Configure this file appropriately for local groups of workstations and what modules they inherit.