A number of Github repos of code meant to be used to harden servers in various ways prior to deployment.
How to specify relationships between files and packages in puppet.