Révision 8efbdf9a
Refactoring
manifests/rules/out/puppet.pp | ||
---|---|---|
6 | 6 |
$puppetserver_port = 8140, |
7 | 7 |
) { |
8 | 8 |
any2array($puppetmaster).each |$index,$pm| { |
9 |
nftables::filter::chain::rule{
|
|
9 |
nftables::rule{ |
|
10 | 10 |
"default_out-puppet-${index}": |
11 | 11 |
} |
12 | 12 |
if $pm =~ /:/ { |
13 |
Nftables::Filter::Chain::Rule["default_out-puppet-${index}"]{
|
|
13 |
nftables::rule["default_out-puppet-${index}"]{
|
|
14 | 14 |
content => "ip6 daddr ${pm} tcp dport ${puppetserver_port} accept", |
15 | 15 |
} |
16 | 16 |
} else { |
17 |
Nftables::Filter::Chain::Rule["default_out-puppet-${index}"]{
|
|
17 |
nftables::rule["default_out-puppet-${index}"]{
|
|
18 | 18 |
content => "ip daddr ${pm} tcp dport ${puppetserver_port} accept", |
19 | 19 |
} |
20 | 20 |
} |
Formats disponibles : Unified diff