Projet

Général

Profil

Paste
Télécharger au format
Statistiques
| Branche: | Révision:

root / spec / defines @ 7e5b657a

# Date Auteur Commentaire
7e5b657a 2020-12-08 11:49 Steve Traylen

rubocop:auto_correct fixes

30462da1 2020-11-26 05:19 Steve Traylen

Reload rules atomically

Background: The unit file for nftables on CentOS 8 contains:

```
ExecStart=/sbin/nft -f /etc/sysconfig/nftables.conf
ExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";'
ExecStop=/sbin/nft flush ruleset
```...

61f03b47 2020-11-19 09:19 Steve Traylen

Switch $order$fragmenta/b to $order-$fragment-a/b

e53053ce 2020-11-19 08:31 Steve Traylen

Add comments for all the nftable::rules entries

For each nftable::rule this adds an extra concat fragment to
add a comment containing the name and order number for the rule.

The motivation here is to make the mapping from resulting rules back
to puppet code more obvious. When adding a new rule it should be more...

7bb485c5 2020-11-16 09:19 Nacho Barrientos

Allow dashes in set names

9f0498e3 2020-11-16 09:16 Nacho Barrientos

Relax nftables::set::type making it optional

This is needed in case nftables::set is passed raw configuration via
source or content.

20b96360 2020-11-13 09:57 Nacho Barrientos

Add support for named sets