X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fper_host.pp;h=ed16764df1a42d55e30c85afe4a448ccc53d34fe;hb=d348da25beaad1ff77c3f94b8b1b53fc29f6b3ef;hp=b2a60090d0c21e08752328db887a39b9b64634d8;hpb=7b5f8bd99839bcbd9080209121f58f9aee5a9831;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/per_host.pp b/modules/ferm/manifests/per_host.pp index b2a60090d..ed16764df 100644 --- a/modules/ferm/manifests/per_host.pp +++ b/modules/ferm/manifests/per_host.pp @@ -125,7 +125,6 @@ class ferm::per_host { ${ join(getfromhash($deprecated::allnodeinfo, 'quantz.debian.org', 'ipHostNumber'), " ") } ${ join(getfromhash($deprecated::allnodeinfo, 'respighi.debian.org', 'ipHostNumber'), " ") } ${ join(getfromhash($deprecated::allnodeinfo, 'tate.debian.org', 'ipHostNumber'), " ") } - \$HOST_PGBACKUPHOST )) | EOF } @@ -150,7 +149,6 @@ class ferm::per_host { rule => @("EOF"/$) &SERVICE_RANGE(tcp, 5440, ( ${ join(getfromhash($deprecated::allnodeinfo, 'sor.debian.org', 'ipHostNumber'), " ") } - \$HOST_PGBACKUPHOST )) | EOF } @@ -215,24 +213,11 @@ class ferm::per_host { domain => '(ip ip6)', rule => @("EOF"/$) &SERVICE_RANGE(tcp, 5473, ( - ${ join(getfromhash($deprecated::allnodeinfo, 'lw07.debian.org', 'ipHostNumber'), " ") } ${ join(getfromhash($deprecated::allnodeinfo, 'snapshotdb-manda-01.debian.org', 'ipHostNumber'), " ") } - \$HOST_PGBACKUPHOST )) | EOF } } - lw07: { - ferm::rule { 'dsa-postgres-snapshot': - description => 'Allow postgress access', - rule => '&SERVICE_RANGE(tcp, 5439, ( 185.17.185.176/28 ))' - } - ferm::rule { 'dsa-postgres-snapshot6': - domain => 'ip6', - description => 'Allow postgress access', - rule => '&SERVICE_RANGE(tcp, 5439, ( 2001:1af8:4020:b030::/64 ))' - } - } snapshotdb-manda-01: { ferm::rule { 'dsa-postgres-snapshot': domain => '(ip ip6)',