summaryrefslogtreecommitdiff
path: root/manifests/redirect.pp
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2022-01-08 15:50:26 -0300
committerSilvio Rhatto <rhatto@riseup.net>2022-01-08 15:50:26 -0300
commit3d1cf84f39fece3f2a9f8b7247a792212eb81177 (patch)
treef1fa5ca591908d363d13d30256f7af3b242d2d6b /manifests/redirect.pp
parent55fa862bae8e2582e5ac0c008a0bb0ec53d9bfff (diff)
downloadpuppet-firewall-3d1cf84f39fece3f2a9f8b7247a792212eb81177.tar.gz
puppet-firewall-3d1cf84f39fece3f2a9f8b7247a792212eb81177.tar.bz2
Feat: major refactor
Diffstat (limited to 'manifests/redirect.pp')
-rw-r--r--manifests/redirect.pp20
1 files changed, 6 insertions, 14 deletions
diff --git a/manifests/redirect.pp b/manifests/redirect.pp
index dee9a98..de50f86 100644
--- a/manifests/redirect.pp
+++ b/manifests/redirect.pp
@@ -1,16 +1,8 @@
-class firewall::redirect::ssh($destinationport) {
- # When the box is in an internal network and we want to provide
- # and external access through a shared real IP, we have to
- # redirect requests coming from another port to port 22.
- $ip = lookup('firewall::external_ip', undef, undef, $::ipaddress)
-
- shorewall::rule { "ssh-redirect-1":
- action => 'DNAT',
- source => 'net',
- destination => "fw:$ip:22",
- proto => 'tcp',
- destinationport => $destinationport,
- ratelimit => '-',
- order => $destinationport,
+class firewall::redirect::ssh(
+ $implementation = lookup('firewall::implementation', undef, undef, 'shorewall'),
+ $destinationport,
+) {
+ class { "firewall::implementations::${implementation}::redirect::ssh":
+ destinationport = $destinationport,
}
}