Projet

Général

Profil

Paste
Télécharger au format
Statistiques
| Branche: | Révision:

root / manifests / rules / out / puppet.pp @ 25205881

Historique | Voir | Annoter | Télécharger (587 octets)

1
# manage outgoing puppet
2
class nftables::rules::out::puppet(
3
  Variant[String,Array[String,1]]
4
    $puppetmaster,
5
  Integer
6
    $puppetserver_port = 8140,
7
) {
8
  any2array($puppetmaster).each |$index,$pm| {
9
    nftables::rule{
10
      "default_out-puppet-${index}":
11
    }
12
    if $pm =~ /:/ {
13
      Nftables::Rule["default_out-puppet-${index}"]{
14
        content => "ip6 daddr ${pm} tcp dport ${puppetserver_port} accept",
15
      }
16
    } else {
17
      Nftables::Rule["default_out-puppet-${index}"]{
18
        content => "ip daddr ${pm} tcp dport ${puppetserver_port} accept",
19
      }
20
    }
21
  }
22
}