module-puppetdb/manifests/server/firewall.pp

25 lines
671 B
Puppet

# PRIVATE CLASS - do not use directly
class puppetdb::server::firewall (
$http_port = $puppetdb::params::listen_port,
$open_http_port = $puppetdb::params::open_listen_port,
$ssl_port = $puppetdb::params::ssl_listen_port,
$open_ssl_port = $puppetdb::params::open_ssl_listen_port,
) inherits puppetdb::params {
include firewall
if ($open_http_port) {
firewall { "${http_port} accept - puppetdb":
dport => $http_port,
proto => 'tcp',
action => 'accept',
}
}
if ($open_ssl_port) {
firewall { "${ssl_port} accept - puppetdb":
dport => $ssl_port,
proto => 'tcp',
action => 'accept',
}
}
}