The nm user also wants lingering

[mirror/dsa-puppet.git] / modules / roles / manifests / ports_master.pp

diff --git a/modules/roles/manifests/ports_master.pp b/modules/roles/manifests/ports_master.pp
index 5dc609d..2faf0e0 100644 (file)
--- a/modules/roles/manifests/ports_master.pp
+++ b/modules/roles/manifests/ports_master.pp
@@ -21,9 +21,9 @@ class roles::ports_master {
 
   # export ssh allow rules for hosts that we should be able to access
   @@ferm::rule::simple { "dsa-ssh-from-ports_master-${::fqdn}":
-    tag         => 'ssh::server::allow::ports_master',
+    tag         => 'ssh::server::from::ports_master',
     description => 'Allow ssh access from ports-master',
-    port        => '22',
+    chain       => 'ssh',
     saddr       => $base::public_addresses,
   }
 }