Move archvsync ferm sshs from the input chain to the new ssh chain

[mirror/dsa-puppet.git] / modules / roles / manifests / syncproxy.pp

diff --git a/modules/roles/manifests/syncproxy.pp b/modules/roles/manifests/syncproxy.pp
index cb017d5..aa452f0 100644 (file)
--- a/modules/roles/manifests/syncproxy.pp
+++ b/modules/roles/manifests/syncproxy.pp
@@ -63,7 +63,7 @@ class roles::syncproxy(
   @@ferm::rule::simple { "dsa-ssh-from-syncproxy-${::fqdn}":
     tag         => 'ssh::server::from::syncproxy',
     description => 'Allow ssh access from a syncproxy',
-    port        => '22',
+    chain       => 'ssh',
     saddr       => $ssh_source_addresses,
   }
   # syncproxies should be accessible from various role hosts