aboutsummaryrefslogtreecommitdiff
path: root/manifests
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2012-09-27 14:32:55 -0300
committerSilvio Rhatto <rhatto@riseup.net>2012-09-27 14:32:55 -0300
commit6f37ee6f59a8061a25b39254ced977c34a27a785 (patch)
tree7e30c78f81fbb32a042dcaca4cbf00624de2fb6e /manifests
parent3848bb004f97b9ec99002f18b1d4c32fda862cbb (diff)
downloadpuppet-nodo-6f37ee6f59a8061a25b39254ced977c34a27a785.tar.gz
puppet-nodo-6f37ee6f59a8061a25b39254ced977c34a27a785.tar.bz2
Adding firewall::vserver::rsync
Diffstat (limited to 'manifests')
-rw-r--r--manifests/subsystems/firewall/vserver.pp12
-rw-r--r--manifests/vserver.pp8
2 files changed, 19 insertions, 1 deletions
diff --git a/manifests/subsystems/firewall/vserver.pp b/manifests/subsystems/firewall/vserver.pp
index 4262244..c244e09 100644
--- a/manifests/subsystems/firewall/vserver.pp
+++ b/manifests/subsystems/firewall/vserver.pp
@@ -477,3 +477,15 @@ class firewall::vserver::yacy($destination, $zone = 'fw') {
order => '2500',
}
}
+
+class firewall::vserver::rsync($destination, $zone = 'fw') {
+ shorewall::rule { 'rsync-0':
+ action => 'DNAT',
+ source => 'net',
+ destination => "$zone:$destination:873",
+ proto => 'tcp',
+ destinationport => '873',
+ ratelimit => '-',
+ order => '2600',
+ }
+}
diff --git a/manifests/vserver.pp b/manifests/vserver.pp
index aa864ed..de2b2ef 100644
--- a/manifests/vserver.pp
+++ b/manifests/vserver.pp
@@ -48,7 +48,7 @@ class nodo::vserver inherits nodo {
$icecast = false, $sound = false, $tor = false,
$ticket = false, $memory_limit = false, $distro = 'squeeze',
$dns = false, $munin_port = false, $monkeysphere_ssh_port = false,
- $jabber = false, $mumble = false, $gobby = false, $yacy = false) {
+ $jabber = false, $mumble = false, $gobby = false, $yacy = false, $rsync = false) {
# set instance id
if $context <= 9 {
@@ -223,6 +223,12 @@ class nodo::vserver inherits nodo {
"firewall::vserver::yacy": destination => "192.168.0.$context";
}
}
+
+ if $rsync {
+ class {
+ "firewall::vserver::rsync": destination => "192.168.0.$context";
+ }
+ }
}
}
}