gpos:
    - id: '{GPOId}'
      name: GPOName
      rules:
        apparmor:
            - key: apparmor-machine
              value: |
                usr.bin.foo
                usr.bin.bar
                nested/usr.bin.baz
              disabled: false
        certificate:
            - key: autoenroll
              value: "7"
              disabled: false
        dconf:
            - key: path/to/key1
              value: ValueOfKey1
              disabled: false
              meta: s
            - key: path/to/key2
              value: |
                ValueOfKey2
                On
                Multilines
              disabled: false
              meta: s
        mount:
            - key: system-mounts
              value: |
                nfs://example.com/nfs_share
                smb://example.com/smb_share
                ftp://example.com/ftp_share
              disabled: false
        privilege:
            - key: allow-local-admins
              value: ""
              disabled: false
            - key: client-admins
              value: |
                alice@domain
                bob@domain2
                %mygroup@domain
                cosmic carole@domain
              disabled: false
        proxy:
            - key: proxy/auto
              value: http://example.com/proxy.pac
              disabled: false
            - key: proxy/http
              value: ""
              disabled: true
            - key: proxy/no-proxy
              value: localhost,127.0.0.1,::1
              disabled: false
        scripts:
            - key: startup
              value: |
                script-machine-startup
                subfolder/other-script
                final-machine-script.sh
              disabled: false
            - key: shutdown
              value: |
                script-machine-shutdown
              disabled: false
            - key: logon
              value: |
                script-user-logon
              disabled: false
            - key: logoff
              value: |
                otherfolder/script-user-logoff
              disabled: false
