aboutsummaryrefslogtreecommitdiff
path: root/manifests/subsystems/firewall.pp
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2013-01-23 11:12:23 -0200
committerSilvio Rhatto <rhatto@riseup.net>2013-01-23 11:12:23 -0200
commit78a678ca46a45292322592f536aff75c637ed442 (patch)
tree66ce1795a5656c14f5c5ec5a8335661602148f6d /manifests/subsystems/firewall.pp
parent40c517b334bd99fec985959f97e48c775ae6da3a (diff)
downloadpuppet-nodo-78a678ca46a45292322592f536aff75c637ed442.tar.gz
puppet-nodo-78a678ca46a45292322592f536aff75c637ed442.tar.bz2
Changing class firewall::local to use hiera
Diffstat (limited to 'manifests/subsystems/firewall.pp')
-rw-r--r--manifests/subsystems/firewall.pp15
1 files changed, 6 insertions, 9 deletions
diff --git a/manifests/subsystems/firewall.pp b/manifests/subsystems/firewall.pp
index 293b827..59bc1f1 100644
--- a/manifests/subsystems/firewall.pp
+++ b/manifests/subsystems/firewall.pp
@@ -1,8 +1,10 @@
# firewall definitions for physical servers
-class firewall {
+class firewall(
+ $local_net = hiera('firewall::local_net', false),
+) {
class { 'shorewall': }
- $rfc1918 = $shorewall_local_net ? {
+ $rfc1918 = $local_net ? {
true => true,
false => false,
default => false,
@@ -201,12 +203,7 @@ class firewall {
options => "default",
}
- if $shorewall_local_net {
- class { "firewall::local":
- network => $shorewall_local_net_network,
- interface => $shorewall_local_net_iface,
- manage_host => $shorewall_local_net_manage_host,
- manage_interface => $shorewall_local_net_manage_iface,
- }
+ if $local_net {
+ class { "firewall::local": }
}
}