config( $ensure )

Config[Port]
   ensure => 'real_ssh_port'

Nagios::Service[ssh_port_${real_ssh_port}]
   check_command => 'ssh_port!$real_ssh_port'

Package[openssh-server]
   ensure => 'installed'
   require => ['#', '#']

Service[ssh]
   ensure => 'running'
   pattern => 'sshd'
   require => '#'
   subscribe => ['#', '#']

User[sshd]
   uid => '204'
   gid => '65534'
   home => '/var/run/sshd'
   shell => '/usr/sbin/nologin'
   allowdupe => '#'