aboutsummaryrefslogtreecommitdiff
path: root/manifests/init.pp
diff options
context:
space:
mode:
authorFabien COMBERNOUS <fabien.combernous@adullact.org>2019-01-24 21:40:30 +0100
committerFabien COMBERNOUS <fabien.combernous@adullact.org>2019-01-24 21:49:25 +0100
commitc71d16a192e2ae701027408b431d02048988775e (patch)
tree0a873b92163c3d7012456212b9db75700508e5d5 /manifests/init.pp
parent8c14f40bb5bedad52b608287785ed92c146c4889 (diff)
downloadpuppet-ferm-c71d16a192e2ae701027408b431d02048988775e.tar.gz
puppet-ferm-c71d16a192e2ae701027408b431d02048988775e.tar.bz2
permit to choose ipv4, ipv6 or both
Diffstat (limited to 'manifests/init.pp')
-rw-r--r--manifests/init.pp8
1 files changed, 6 insertions, 2 deletions
diff --git a/manifests/init.pp b/manifests/init.pp
index 82f163c..a8b886d 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -2,9 +2,10 @@
#
# This class manages ferm installation and rule generation on modern linux systems
#
-# @example deploy ferm and start it
+# @example deploy ferm and start it, on node with only ipv6 enabled
# class{'ferm':
-# manage_service => true,
+# manage_service => true,
+# ip_versions => ['ip6'],
# }
#
# @param manage_service Disable/Enable the management of the ferm daemon
@@ -40,6 +41,8 @@
# @param input_log_dropped_packets Enable/Disable logging in the INPUT chain of packets to the kernel log, if no explicit chain matched
# Default value: false
# Allowed values: (true|false)
+# @param ip_versions Set list of versions of ip we want ot use.
+# Default value: ['ip', 'ip6']
class ferm (
Boolean $manage_service,
Boolean $manage_configfile,
@@ -52,6 +55,7 @@ class ferm (
Boolean $output_log_dropped_packets,
Boolean $input_log_dropped_packets,
Hash $rules,
+ Array[Enum['ip','ip6']] $ip_versions,
) {
contain ferm::install
contain ferm::config