There are two different types of DSC pull server you implement: SMB-based and web-based. The SMB-based pull server approach is most useful on a private routable network, one where all nodes can reach the centralized configuration and resource pull server shares. For high availability, you could set up an SMB pull server on a scale out file server.
In DSC, MOF files are used to communicate the desired state to a node. The LCM on that node, in effect, does anything the MOF file says. MOF files are ,at rest, just plain text documents and are not encrypted or signed. If your private network is secure, then the SMB pull server is easier to set up and configure. If security is an issue, consider using the web server pull server approach and configure it with HTTPS.
In the previous recipe, Configuring Local Configuration Manager, you configured a node,...