Projet

Général

Profil

Paste
Télécharger au format
Statistiques
| Branche: | Révision:

root / manifests / rules / out / puppet.pp @ 04176b0e

Historique | Voir | Annoter | Télécharger (631 octets)

1
# manage outgoing puppet
2
class nftables::rules::out::puppet (
3
  Variant[Stdlib::IP::Address,Array[Stdlib::IP::Address,1]] $puppetserver,
4
  Integer $puppetserver_port = 8140,
5
) {
6
  Array($puppetserver, true).each |$index,$ps| {
7
    nftables::rule {
8
      "default_out-puppet-${index}":
9
    }
10
    if $ps =~ Stdlib::IP::Address::V6 {
11
      Nftables::Rule["default_out-puppet-${index}"] {
12
        content => "ip6 daddr ${ps} tcp dport ${puppetserver_port} accept",
13
      }
14
    } else {
15
      Nftables::Rule["default_out-puppet-${index}"] {
16
        content => "ip daddr ${ps} tcp dport ${puppetserver_port} accept",
17
      }
18
    }
19
  }
20
}