Feat: major refactor

1 files changed, 36 insertions, 0 deletions

diff --git a/manifests/implementations/ferm/tpc.pp b/manifests/implementations/ferm/tpc.pp
new file mode 100644
index 0000000..b36c83f
--- /dev/null
+++ b/manifests/implementations/ferm/tpc.pp
@@ -0,0 +1,36 @@
+# Basic configuration inspired by
+# http://ferm.foo-projects.org/download/examples/workstation.ferm
+class firewall::implementations::ferm::tpc {
+  # Currently conflicting with the stdlib and concat module's versions in use
+  #ferm::rule{ "allow-local-tcp":
+  #  chain     => 'INPUT',
+  #  action    => 'ACCEPT',
+  #  proto     => 'tcp',
+  #  interface => 'lo',
+  #  ensure    => 'present',
+  #}
+
+  # Currently conflicting with the stdlib and concat module's versions in use
+  #ferm::rule{ "allow-local-udp":
+  #  chain     => 'INPUT',
+  #  action    => 'ACCEPT',
+  #  proto     => 'udp',
+  #  interface => 'lo',
+  #  ensure    => 'present',
+  #}
+
+  file { '/etc/ferm/ferm.conf':
+    ensure  => present,
+    owner   => root,
+    group   => adm,
+    mode    => '0644',
+    require => Package['ferm'],
+    notify  => Service['ferm'],
+    source  => [
+                 "puppet:///modules/firewall/ferm/ferm.conf.tpc",
+                 "puppet:///modules/firewall/ferm/ferm.conf.${::hostname}",
+                 "puppet:///modules/site_firewall/ferm/ferm.conf.tpc",
+                 "puppet:///modules/site_firewall/ferm/ferm.conf.${::hostname}",
+               ],
+  }
+}