From b5d6d660e37a11262389405efaef3d7c0ec6be96 Mon Sep 17 00:00:00 2001
From: Arne Teuke <arne_teuke@confdroid.com>
Date: Mon, 27 Oct 2025 19:13:22 +0100
Subject: [PATCH] remove puppetdb fw settings -
 https://gitlab.confdroid.com/internal/confdroid_management/-/issues/284

---
 manifests/firewall/iptables.pp | 23 -----------------------
 1 file changed, 23 deletions(-)

diff --git a/manifests/firewall/iptables.pp b/manifests/firewall/iptables.pp
index ad5c395..fe26bbb 100644
--- a/manifests/firewall/iptables.pp
+++ b/manifests/firewall/iptables.pp
@@ -26,27 +26,4 @@ class puppet_cd::firewall::iptables (
       }
     }
   }
-
-  if $fqdn == $pt_db_fqdn {
-    if $pt_use_ssl_only != true {
-      firewall { "3${pt_no_ssl_port} open port ${pt_no_ssl_port}":
-        proto => 'tcp',
-        dport => $pt_no_ssl_port,
-        jump  => 'accept',
-      }
-      firewall { "3${pt_ssl_port} open port ${pt_ssl_port}":
-        proto => 'tcp',
-        dport => $pt_ssl_port,
-        jump  => 'accept',
-      }
-    }
-
-    if $pt_use_ssl_only == true {
-      firewall { "3${pt_ssl_port} open port ${pt_ssl_port}":
-        proto => 'tcp',
-        dport => $pt_ssl_port,
-        jump  => 'accept',
-      }
-    }
-  }
 }