X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fferm%2Fmanifests%2Fper_host.pp;h=ed818f12d051165db17ab206fe7aec8c180c7059;hb=2c98db46d913527bc8df135f1720698e1002a920;hp=10b99f8c9f5281cddb83a8b859da23963ee76d6f;hpb=25cee51c183c4f8d97b380314ad50075bc7d04e6;p=mirror%2Fdsa-puppet.git diff --git a/modules/ferm/manifests/per_host.pp b/modules/ferm/manifests/per_host.pp index 10b99f8c9..ed818f12d 100644 --- a/modules/ferm/manifests/per_host.pp +++ b/modules/ferm/manifests/per_host.pp @@ -146,17 +146,6 @@ class ferm::per_host { )) | EOF } - ferm::rule { 'dsa-postgres-bacula': - description => 'Allow postgress access to cluster: bacula', - domain => '(ip ip6)', - rule => @("EOF"/$) - &SERVICE_RANGE(tcp, 5437, ( - ${ join(getfromhash($deprecated::allnodeinfo, 'dinis.debian.org', 'ipHostNumber'), " ") } - ${ join(getfromhash($deprecated::allnodeinfo, 'storace.debian.org', 'ipHostNumber'), " ") } - \$HOST_PGBACKUPHOST - )) - | EOF - } ferm::rule { 'dsa-postgres-dedup': description => 'Allow postgress access to cluster: dedup', domain => '(ip ip6)', @@ -217,6 +206,19 @@ class ferm::per_host { | EOF } } + postgresql-manda-01: { + ferm::rule { 'dsa-postgres-bacula': + description => 'Allow postgress access to cluster: bacula', + domain => '(ip ip6)', + rule => @("EOF"/$) + &SERVICE_RANGE(tcp, 5432, ( + ${ join(getfromhash($deprecated::allnodeinfo, 'dinis.debian.org', 'ipHostNumber'), " ") } + ${ join(getfromhash($deprecated::allnodeinfo, 'storace.debian.org', 'ipHostNumber'), " ") } + \$HOST_PGBACKUPHOST + )) + | EOF + } + } seger: { ferm::rule { 'dsa-postgres-backup': description => 'Allow postgress access',