diff --git a/data/location/vagrant.yaml b/data/location/vagrant.yaml
new file mode 100644
--- /dev/null
+++ b/data/location/vagrant.yaml
@@ -0,0 +1,34 @@
+# forwarder for :
+# - swh network
+# - Inria network
+# - external network
+dns::forwarders:
+  - 192.168.100.29
+  - 192.168.200.22
+  - 128.93.77.234
+  - 1.1.1.1
+dns::forwarder_insecure: true
+
+ntp::servers:
+  - sesi-ntp1.inria.fr
+  - sesi-ntp2.inria.fr
+
+internal_network: 10.168.128.0/16
+
+smtp::relay_hostname: 'none'
+
+swh::deploy::worker::instances:
+  - checker_deposit
+  - lister
+  - loader_archive
+  - loader_cran
+  - loader_debian
+  - loader_deposit
+  - loader_git
+  - loader_mercurial
+  - loader_nixguix
+  - loader_npm
+  - loader_pypi
+  - loader_svn
+
+dns::forward_zones: { }
diff --git a/data/vagrant/webapp.internal.staging.swh.network.yaml b/data/vagrant/webapp.internal.staging.swh.network.yaml
new file mode 100644
--- /dev/null
+++ b/data/vagrant/webapp.internal.staging.swh.network.yaml
@@ -0,0 +1,4 @@
+networks:
+    eth0:
+      address: 10.168.128.8
+      netmask: 255.255.255.0
diff --git a/data/vagrant/worker0.internal.staging.swh.network.yaml b/data/vagrant/worker0.internal.staging.swh.network.yaml
new file mode 100644
--- /dev/null
+++ b/data/vagrant/worker0.internal.staging.swh.network.yaml
@@ -0,0 +1,4 @@
+networks:
+  eth0:
+    address: 10.168.128.5
+    netmask: 255.255.255.0
diff --git a/data/vagrant/worker01.softwareheritage.org.yaml b/data/vagrant/worker01.softwareheritage.org.yaml
new file mode 100644
--- /dev/null
+++ b/data/vagrant/worker01.softwareheritage.org.yaml
@@ -0,0 +1,5 @@
+networks:
+  eth0:
+    type: private
+    address: 10.168.100.21
+    netmask: 255.255.255.0
diff --git a/hiera-vagrant.yaml b/hiera-vagrant.yaml
new file mode 100644
--- /dev/null
+++ b/hiera-vagrant.yaml
@@ -0,0 +1,22 @@
+---
+version: 5
+defaults:
+  datadir: data         # datadir by default moved to 'defaults' folder
+  data_hash: yaml_data  # Default backend
+hierarchy:
+  - path: "vagrant/%{trusted.certname}.yaml"
+    name: "Vagrant overrides by hostnames"
+  - path: "private/hostname/%{trusted.certname}.yaml"
+    name: "Per hostname private credentials override"
+  - path: "private/location/%{::location}.yaml"
+    name: "Per location private credentials override"
+  - path: "private/defaults.yaml"
+    name: "Default private credentials"
+  - path: "hostname/%{trusted.certname}.yaml"
+    name: "Per hostname override configuration"
+  - path: "location/%{::location}.yaml"
+    name: "Per location override configuration"
+  - path: "defaults_security.yaml"
+    name: "Public keys configuration"
+  - path: "defaults.yaml"
+    name: "Main default configuration"