summaryrefslogtreecommitdiff
path: root/manifests/virtual/https.pp
diff options
context:
space:
mode:
Diffstat (limited to 'manifests/virtual/https.pp')
-rw-r--r--manifests/virtual/https.pp11
1 files changed, 6 insertions, 5 deletions
diff --git a/manifests/virtual/https.pp b/manifests/virtual/https.pp
index ea900d8..36e0c9f 100644
--- a/manifests/virtual/https.pp
+++ b/manifests/virtual/https.pp
@@ -1,18 +1,19 @@
-class firewall::virtual::https($destination, $zone = 'vm') {
+class firewall::virtual::https($destination) {
shorewall::rule { 'https-route-1':
action => 'DNAT',
- source => 'net',
- destination => "$zone:$destination:443",
+ source => 'vm',
+ destination => "fw:$destination:443",
proto => 'tcp',
destinationport => '443',
+ originaldest => hiera('firewall::external_ip', $::ipaddress),
ratelimit => hiera("firewall::ssl_ratelimit", '-'),
order => 602,
}
shorewall::rule { 'https-route-2':
action => 'DNAT',
- source => '$FW',
- destination => "fw:$destination:443",
+ source => 'net',
+ destination => "vm:$destination:443",
proto => 'tcp',
destinationport => '443',
originaldest => hiera('firewall::external_ip', $::ipaddress),