DMZ deployment

The deployment in the DMZ ist the same as internaly, the only exception is that for Puppet you need to order a firewall rule from your machine to puppet01.psi.ch using TCP port 8140.