diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2016-06-09 17:52:57 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2016-06-09 17:52:57 -0300 |
| commit | 40a9f5b6d556615ad95085b51ec56585dfbe248d (patch) | |
| tree | 9cc6b3cbf5c767422a1c73ac374127f659f24b26 /manifests/virtual/gitd.pp | |
| parent | 059ddc10d09b87f1e21807d0aedff08745f8701a (diff) | |
| download | puppet-firewall-40a9f5b6d556615ad95085b51ec56585dfbe248d.tar.gz puppet-firewall-40a9f5b6d556615ad95085b51ec56585dfbe248d.tar.bz2 | |
Updates some firewall::virtual rules to new kvm scheme
Diffstat (limited to 'manifests/virtual/gitd.pp')
| -rw-r--r-- | manifests/virtual/gitd.pp | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/manifests/virtual/gitd.pp b/manifests/virtual/gitd.pp index 23095aa..02c4fb9 100644 --- a/manifests/virtual/gitd.pp +++ b/manifests/virtual/gitd.pp @@ -1,18 +1,19 @@ -class firewall::virtual::gitd($destination, $zone = 'fw') { +class firewall::virtual::gitd($destination) { shorewall::rule { 'git-daemon-1': action => 'DNAT', source => 'net', - destination => "$zone:$destination:9418", + destination => "vm:$destination:9418", proto => 'tcp', destinationport => '9418', + originaldest => hiera('firewall::external_ip', $::ipaddress), ratelimit => '-', order => 800, } shorewall::rule { 'git-daemon-2': action => 'DNAT', - source => '$FW', - destination => "$zone:$destination:9418", + source => 'vm', + destination => "fw:$destination:9418", proto => 'tcp', destinationport => '9418', originaldest => hiera('firewall::external_ip', $::ipaddress), |