puppet nftables

# @summary allows outbound access for afs clients

# 7000 - afs3-fileserver

# 7002 - afs3-ptserver

# 7003 - vlserver

#

# @see https://wiki.openafs.org/devel/AFSServicePorts/ AFS Service Ports

#

class nftables::rules::out::openafs_client(

  Array[Integer,1] $ports = [7000, 7002, 7003],

){

  include nftables::rules::out::kerberos

  nftables::rule{'default_out-openafs_client':

    content => "udp dport {${$ports.join(', ')}} accept";

  }

}