This will require building a new server; an in-place migration is not possible since the existing servers are running Buster.

Right now we have a two-node balanced pair of puppetmasters. Supporting that with puppet 7 will require some coding work. I think we should start with just one big server, apply role::puppetserver::cloud_vps_project, and see if it can keep up. If we can use the same puppet class for this server as for project-local ones then future maintenance will be a bit easier.