aboutsummaryrefslogtreecommitdiff
path: root/manifests
diff options
context:
space:
mode:
authorTim Meusel <tim@bastelfreak.de>2020-04-09 08:58:16 +0200
committerTim Meusel <tim@bastelfreak.de>2020-04-09 08:58:16 +0200
commitca34f8d46d77ed801eca6ab5a04ef269481f9a55 (patch)
treeca96cc72211519743848fc8edeeb6878c12a9c40 /manifests
parent926cc5ecf8946440cec80c08010cc3ab89494f01 (diff)
downloadpuppet-ferm-ca34f8d46d77ed801eca6ab5a04ef269481f9a55.tar.gz
puppet-ferm-ca34f8d46d77ed801eca6ab5a04ef269481f9a55.tar.bz2
cleanup puppet-strings documentation
Diffstat (limited to 'manifests')
-rw-r--r--manifests/chain.pp5
-rw-r--r--manifests/config.pp5
-rw-r--r--manifests/init.pp2
-rw-r--r--manifests/install.pp5
-rw-r--r--manifests/ipset.pp10
-rw-r--r--manifests/service.pp5
6 files changed, 19 insertions, 13 deletions
diff --git a/manifests/chain.pp b/manifests/chain.pp
index 1be7e83..b66ef7f 100644
--- a/manifests/chain.pp
+++ b/manifests/chain.pp
@@ -10,16 +10,13 @@
# @param disable_conntrack Disable/Enable usage of conntrack
# @param log_dropped_packets Enable/Disable logging of packets to the kernel log, if no explicit chain matched
# @param policy Set the default policy for CHAIN (works only for builtin chains)
-# Default value: undef
# Allowed values: (ACCEPT|DROP) (see Ferm::Policies type)
# @param chain Name of the chain that should be managed
-# Default value: $name (resource name)
# Allowed values: String[1]
# @param table Select the target table (filter/raw/mangle/nat)
-# Default value: 'filter'
# Allowed values: (filter|raw|mangle|nat) (see Ferm::Tables type)
# @param ip_versions Set list of versions of ip we want ot use.
-# Default value: $ferm::ip_versions
+#
define ferm::chain (
Boolean $disable_conntrack,
Boolean $log_dropped_packets,
diff --git a/manifests/config.pp b/manifests/config.pp
index 7dae7a5..acc58d6 100644
--- a/manifests/config.pp
+++ b/manifests/config.pp
@@ -1,5 +1,8 @@
+#
# @api private
-# This class handles the configuration file. Avoid modifying private classes.
+#
+# @summary This class handles the configuration file. Avoid modifying private classes.
+#
class ferm::config {
# this is a private class
diff --git a/manifests/init.pp b/manifests/init.pp
index cb3dd1b..ecaa391 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -1,5 +1,3 @@
-# Class: ferm
-#
# @summary This class manages ferm installation and rule generation on modern linux systems
#
# @example deploy ferm without any configured rules, but also don't start the service or modify existing config files
diff --git a/manifests/install.pp b/manifests/install.pp
index 548846c..4337a99 100644
--- a/manifests/install.pp
+++ b/manifests/install.pp
@@ -1,5 +1,8 @@
+#
# @api private
-# This class handles the configuration file. Avoid modifying private classes.
+#
+# @summary This class handles the configuration file. Avoid modifying private classes.
+#
class ferm::install {
# this is a private class
diff --git a/manifests/ipset.pp b/manifests/ipset.pp
index 1f859b8..23c555a 100644
--- a/manifests/ipset.pp
+++ b/manifests/ipset.pp
@@ -3,14 +3,14 @@
#
# @see http://ferm.foo-projects.org/download/2.1/ferm.html#set
#
-# @example
+# @example Create an iptables rule that allows traffic that matches the ipset `internet`
# ferm::ipset { 'CONSUL':
# sets => {
# 'internet' => 'ACCEPT'
# },
# }
#
-# @example create to matches for IPv6, both at the end of the `INPUT` chain. Explicitly mention the `filter` table.
+# @example create two matches for IPv6, both at the end of the `INPUT` chain. Explicitly mention the `filter` table.
# ferm::ipset { 'INPUT':
# prepend_to_chain => false,
# table => 'filter',
@@ -21,6 +21,8 @@
# },
# }
#
+# @param sets
+# A hash with multiple sets. For each hash you can provide an action like `DROP` or `ACCEPT`.
# @param chain
# name of the chain we want to apply those rules to. The name of the defined resource will be used as default value for this.
#
@@ -30,8 +32,8 @@
# @param ip_version
# sadly, ip sets are version specific. You cannot mix IPv4 and IPv6 addresses. Because of this you need to provide the version.
#
-# @param sets
-# A hash with multiple sets. For each hash you can provide an action like `DROP` or `ACCEPT`.
+# @param prepend_to_chain
+# By default, ipset rules are added to the top of the chain. Set this to false to append them to the end instead.
#
define ferm::ipset (
Hash[String[1], Ferm::Actions] $sets,
diff --git a/manifests/service.pp b/manifests/service.pp
index ad6fc47..9cc1373 100644
--- a/manifests/service.pp
+++ b/manifests/service.pp
@@ -1,5 +1,8 @@
+#
# @api private
-# This class handles the configuration file. Avoid modifying private classes.
+#
+# @summary This class handles the configuration file. Avoid modifying private classes.
+#
class ferm::service {
# this is a private class