59c1cbfbf8
This is a very very large change to the module. It started out as a fix to add postgresl::server::config_entry, and quickly became a rewrite to fix a lot of ordering issues inherent in the API. Since this changes the Public API it is considered a backwards compatible change. See the upgrading guide in README.md for more details as to what has been modified in this patch. Signed-off-by: Ken Barber <ken@bob.sh>
21 lines
626 B
Puppet
21 lines
626 B
Puppet
# PRIVATE CLASS: do not use directly
|
|
class postgresql::server::firewall {
|
|
$ensure = $postgresql::server::ensure
|
|
$manage_firewall = $postgresql::server::manage_firewall
|
|
$firewall_supported = $postgresql::server::firewall_supported
|
|
|
|
if ($manage_firewall and $firewall_supported) {
|
|
if ($ensure == 'present' or $ensure == true) {
|
|
# TODO: get rid of hard-coded port
|
|
firewall { '5432 accept - postgres':
|
|
port => '5432',
|
|
proto => 'tcp',
|
|
action => 'accept',
|
|
}
|
|
} else {
|
|
firewall { '5432 accept - postgres':
|
|
ensure => absent,
|
|
}
|
|
}
|
|
}
|
|
}
|