How to prevent config.ini.php being overwritten

We use puppet to manage the file but it appears matomo overwrites the file so when puppet re-runs it’ll change it back.

How do I stop that?