X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fpubsub.pp;h=3eb02d064b5078460bd9c1e03c19637e46e7843a;hb=0ed55c82789b31b34176a2fdb803dd09a4d6e686;hp=30ae7098f3fbce631a782e43d40f780b0b3aa229;hpb=a81ff959d6c9c7605db1176b89dc2b5ffde0d903;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/pubsub.pp b/modules/roles/manifests/pubsub.pp index 30ae7098f..3eb02d064 100644 --- a/modules/roles/manifests/pubsub.pp +++ b/modules/roles/manifests/pubsub.pp @@ -29,23 +29,23 @@ class roles::pubsub { groups => 'ssl-cert' } - @ferm::rule { 'rabbitmq': + ferm::rule { 'rabbitmq': description => 'rabbitmq connections', rule => '&SERVICE_RANGE(tcp, 5671, $HOST_DEBIAN_V4)' } - @ferm::rule { 'rabbitmq-v6': + ferm::rule { 'rabbitmq-v6': domain => 'ip6', description => 'rabbitmq connections', rule => '&SERVICE_RANGE(tcp, 5671, $HOST_DEBIAN_V6)' } - @ferm::rule { 'rabbitmq-adm': + ferm::rule { 'rabbitmq-adm': description => 'rabbitmq connections', rule => '&SERVICE_RANGE(tcp, 5671, $DSA_IPS)' } - @ferm::rule { 'rabbitmq-v6-adm': + ferm::rule { 'rabbitmq-v6-adm': domain => 'ip6', description => 'rabbitmq connections', rule => '&SERVICE_RANGE(tcp, 5671, $DSA_V6_IPS)' @@ -59,21 +59,21 @@ class roles::pubsub { $you6 = '2001:41c8:1000:21::21:16' } - @ferm::rule { 'rabbitmq_cluster': + ferm::rule { 'rabbitmq_cluster': domain => 'ip', description => 'rabbitmq cluster connections', rule => "proto tcp mod state state (NEW) saddr (${you}) ACCEPT" } - @ferm::rule { 'rabbitmq_cluster_v6': + ferm::rule { 'rabbitmq_cluster_v6': domain => 'ip6', description => 'rabbitmq cluster connections', rule => "proto tcp mod state state (NEW) saddr (${you6}) ACCEPT" } - @ferm::rule { 'rabbitmq_mgmt': + ferm::rule { 'rabbitmq_mgmt': description => 'rabbitmq cluster connections', rule => '&SERVICE_RANGE(tcp, 15671, $DSA_IPS)' } - @ferm::rule { 'rabbitmq_mgmt_v6': + ferm::rule { 'rabbitmq_mgmt_v6': domain => '(ip6)', description => 'rabbitmq cluster connections', rule => '&SERVICE_RANGE(tcp, 15671, $DSA_V6_IPS)'