diff --git a/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/debian.yml b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/debian.yml
new file mode 100644
index 0000000..b6d0b2b
--- /dev/null
+++ b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/debian.yml
@@ -0,0 +1,10 @@
+classes:
+- system.linux.system.single
+
+# DEBIAN family overrides
+parameters:
+  linux:
+    system:
+      package:
+        python-msgpack:
+          version: latest
diff --git a/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/init.yml b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/init.yml
new file mode 100644
index 0000000..1e68380
--- /dev/null
+++ b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/init.yml
@@ -0,0 +1,73 @@
+classes:
+- service.linux.system
+- service.salt.minion.master
+- system.openssh.server.single
+- system.ntp.client.single
+parameters:
+  _param:
+    local_package_repos: false
+  linux:
+    system:
+      local_package_repos: ${_param:local_package_repos}
+      user:
+        root:
+          enabled: true
+          name: root
+          home: /root
+      package:
+        cloud-init:
+          version: purged
+        unattended-updates:
+          version: purged
+        mcelog:
+          version: latest
+      kernel:
+        modules:
+          - nf_conntrack
+        sysctl:
+          net.ipv4.tcp_keepalive_intvl: 3
+          net.ipv4.tcp_keepalive_time: 30
+          net.ipv4.tcp_keepalive_probes: 8
+          fs.file-max: 124165
+          net.core.somaxconn: 4096
+          vm.swappiness: 10
+          net.nf_conntrack_max: 1048576
+          net.ipv4.tcp_retries2: 5
+          net.ipv4.tcp_max_syn_backlog: 8192
+          net.ipv4.neigh.default.gc_thresh1: 4096
+          net.ipv4.neigh.default.gc_thresh2: 8192
+          net.ipv4.neigh.default.gc_thresh3: 16384
+          net.core.netdev_max_backlog: 261144
+          net.ipv4.tcp_tw_reuse: 1
+          kernel.panic: 60
+      cpu:
+        governor: performance
+      timezone: UTC
+      locale:
+        en_US.UTF-8:
+          enabled: true
+          default: true
+        cs_CZ.UTF-8:
+          enabled: true
+      limit:
+        default:
+          enabled: true
+          domain: "*"
+          limits:
+            - type: hard
+              item: nofile
+              value: 307200
+            - type: soft
+              item: nofile
+              value: 307200
+            - type: soft
+              item: nproc
+              value: 307200
+            - type: hard
+              item: nproc
+              value: 307200
+      systemd:
+        system:
+          Manager:
+            DefaultLimitNOFILE: 307200
+            DefaultLimitNPROC: 307200
diff --git a/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/rhel.yml b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/rhel.yml
new file mode 100644
index 0000000..38dba03
--- /dev/null
+++ b/classes/cluster/aaa-ha-freeipa/aaa/linux-system-single/rhel.yml
@@ -0,0 +1,4 @@
+classes:
+- system.linux.system.single
+
+# RHEL family overrides