Projet

Général

Profil

Paste
Télécharger au format
Statistiques
| Branche: | Révision:

root / manifests / rules / out / puppet.pp @ 09b07e56

Historique | Voir | Annoter | Télécharger (583 octets)

1
# manage outgoing puppet
2
class nftables::rules::out::puppet (
3
  Variant[String,Array[String,1]] $puppetmaster,
4
  Integer $puppetserver_port = 8140,
5
) {
6
  any2array($puppetmaster).each |$index,$pm| {
7
    nftables::rule {
8
      "default_out-puppet-${index}":
9
    }
10
    if $pm =~ /:/ {
11
      Nftables::Rule["default_out-puppet-${index}"] {
12
        content => "ip6 daddr ${pm} tcp dport ${puppetserver_port} accept",
13
      }
14
    } else {
15
      Nftables::Rule["default_out-puppet-${index}"] {
16
        content => "ip daddr ${pm} tcp dport ${puppetserver_port} accept",
17
      }
18
    }
19
  }
20
}