confdroid/puppet_cd
3
0
Fork 0
Code Wiki Activity

fix firewall

Browse Source
This commit is contained in:
Arne Teuke
2025-02-26 17:05:18 +01:00
parent 6750222c93
commit 55bcbb6e1c
4 changed files with 57 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
manifests/firewall/iptables.pp
View File

@@ -18,4 +18,27 @@ class puppet_cd::firewall::iptables (
jump => 'accept',
}
}
if $fqdn == $pt_db_fqdn {
if $pt_use_ssl_only != true {
firewall { "3${pt_no_ssl_port} open port ${pt_no_ssl_port}":
proto => 'tcp',
dport => $pt_no_ssl_port,
jump => 'accept',
}
firewall { "3${pt_ssl_port} open port ${pt_ssl_port}":
proto => 'tcp',
dport => $pt_ssl_port,
jump => 'accept',
}
}
if $pt_use_ssl_only == true {
firewall { "3${pt_ssl_port} open port ${pt_ssl_port}":
proto => 'tcp',
dport => $pt_ssl_port,
jump => 'accept',
}
}
}
}