puppet nftables

pull fixtures from git and not forge

Release 2.0.1-rc0

Prepare release 2.0.0

Allow creating a totally empty firewall

By setting `nftables::inet_filter` and `nftables::nat` to `false`
users can now start off from a totally empty firewall and add the
tables, chains and rules they'd like.

The default skeleton for inet-filter, ip-nat and ip6-nat is kept...

Fix IPv4 source address type detection

Before this patch, a rule like this:

```
nftables::simplerule { 'foo':
action => 'accept',
dport => 443,
proto => 'tcp4',
saddr => '192.168.1.10',
}
```

would incorrectly generate this rule:...

Rely on puppet 6 calling daemon-reload

Since Puppet 6 now there no need to explicitly
call `systemctl daemon-reload`.

puppetlabs/concat: Allow 7.x

camptocamp/systemd: allow 3.x

Amend link to Yasnippets

I reorganised my dotfiles a bit so this link must be changed. Sorry
for the noise.

Release 1.3.1-rc0

Prepare release 1.3.0

Add rules for QEMU/libvirt guests

Add optional handling of chains

Add fact section to README.md

Add nftables.version to structured fact.

```
FACTERLIB=. facter -p nftables {
tables => [
"bridge-filter",
"bridge-nat",
"inet-firewalld",
"ip-firewalld",
"ip6-firewalld"
],
version => "0.9.3"
}
```

Fix rulename spec in spec

Add newline & more tests

Merge pull request #82 from cernops/ibarrien_activemq

Add rules for Apache ActiveMQ

Merge pull request #81 from cernops/emacs_readme

Fix sections and add a pointer to code snippets for Emacs

Improve sections' formatting

Release 1.2.0 (#76)

Temporarily use /bin/ for systemctl and echo paths in Debian 10

Debian Buster has symlinks from usrmerge that resolve to /bin/X,
but systems upgraded from Stretch or earlier that haven't installed
usrmerge will not have anything in /usr/bin/X.

This should be removed once every installation we have has had...

Merge pull request #73 from Koumbit/global_chain_not_hardcoded

start declaring the 'global' chain with module resources

start declaring the 'global' chain with module resources

the 'global' chain is a vestigial piece of early development on this
module, but it can be useful for creating fast short-circuits like
blocking traffic that match a certain set of IPs.

in the current state we can't inject rules inside the 'global' chain...

Release 1.1.1 (#71)