diff options
author | Silvio Rhatto <rhatto@riseup.net> | 2016-06-09 17:52:57 -0300 |
---|---|---|
committer | Silvio Rhatto <rhatto@riseup.net> | 2016-06-09 17:52:57 -0300 |
commit | 40a9f5b6d556615ad95085b51ec56585dfbe248d (patch) | |
tree | 9cc6b3cbf5c767422a1c73ac374127f659f24b26 /manifests/virtual/https.pp | |
parent | 059ddc10d09b87f1e21807d0aedff08745f8701a (diff) | |
download | puppet-firewall-40a9f5b6d556615ad95085b51ec56585dfbe248d.tar.gz puppet-firewall-40a9f5b6d556615ad95085b51ec56585dfbe248d.tar.bz2 |
Updates some firewall::virtual rules to new kvm scheme
Diffstat (limited to 'manifests/virtual/https.pp')
-rw-r--r-- | manifests/virtual/https.pp | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/manifests/virtual/https.pp b/manifests/virtual/https.pp index ea900d8..36e0c9f 100644 --- a/manifests/virtual/https.pp +++ b/manifests/virtual/https.pp @@ -1,18 +1,19 @@ -class firewall::virtual::https($destination, $zone = 'vm') { +class firewall::virtual::https($destination) { shorewall::rule { 'https-route-1': action => 'DNAT', - source => 'net', - destination => "$zone:$destination:443", + source => 'vm', + destination => "fw:$destination:443", proto => 'tcp', destinationport => '443', + originaldest => hiera('firewall::external_ip', $::ipaddress), ratelimit => hiera("firewall::ssl_ratelimit", '-'), order => 602, } shorewall::rule { 'https-route-2': action => 'DNAT', - source => '$FW', - destination => "fw:$destination:443", + source => 'net', + destination => "vm:$destination:443", proto => 'tcp', destinationport => '443', originaldest => hiera('firewall::external_ip', $::ipaddress), |