pam::access {
  "root":
    permission  => "+",
    entity      => "root",
    origin      => "ALL",
    priority    => "10";
  "ALL":
    permission  => "-",
    entity      => "ALL",
    origin      => "ALL",
    priority    => "20";
}

pam::limits {
  "nofile_hard":
     ensure   => present,
     domain   => "*",
     type     => "hard",
     item     => "nofile",
     value    => "8192",
     priority => 10;
  "nofile_soft":
     ensure   => present,
     domain   => "*",
     type     => "soft",
     item     => "nofile",
     value    => "1024",
     priority => 20;
  }