mirror ssh firewalling setup from ferm/templates/me.conf.erb with roles

[mirror/dsa-puppet.git] / modules / roles / manifests / security_mirror.pp

diff --git a/modules/roles/manifests/security_mirror.pp b/modules/roles/manifests/security_mirror.pp
index 25cc301..30f0ea0 100644 (file)
--- a/modules/roles/manifests/security_mirror.pp
+++ b/modules/roles/manifests/security_mirror.pp
@@ -50,4 +50,6 @@ class roles::security_mirror {
       target_address => $onion_v4_addr,
     }
   }
+
+  Ferm::Rule::Simple <<| tag == 'ssh::server::from::security_master' |>>
 }