X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fpubsub.pp;h=3eb02d064b5078460bd9c1e03c19637e46e7843a;hb=cc43dd4aaf3660a361c1443393a63737da2814aa;hp=38b55f71806630661c390575b5297c3c0bae6a79;hpb=a832220b134218ea09f160f7ad11c7a502233c65;p=mirror%2Fdsa-puppet.git diff --git a/modules/roles/manifests/pubsub.pp b/modules/roles/manifests/pubsub.pp index 38b55f718..3eb02d064 100644 --- a/modules/roles/manifests/pubsub.pp +++ b/modules/roles/manifests/pubsub.pp @@ -22,30 +22,30 @@ class roles::pubsub { ssl_key => '/etc/ssl/private/thishost-server.key', ssl_port => 5671, ssl_verify => 'verify_none', - manage_repos => false, + repos_ensure => false, } user { 'rabbitmq': groups => 'ssl-cert' } - @ferm::rule { 'rabbitmq': + ferm::rule { 'rabbitmq': description => 'rabbitmq connections', rule => '&SERVICE_RANGE(tcp, 5671, $HOST_DEBIAN_V4)' } - @ferm::rule { 'rabbitmq-v6': + ferm::rule { 'rabbitmq-v6': domain => 'ip6', description => 'rabbitmq connections', rule => '&SERVICE_RANGE(tcp, 5671, $HOST_DEBIAN_V6)' } - @ferm::rule { 'rabbitmq-adm': + ferm::rule { 'rabbitmq-adm': description => 'rabbitmq connections', rule => '&SERVICE_RANGE(tcp, 5671, $DSA_IPS)' } - @ferm::rule { 'rabbitmq-v6-adm': + ferm::rule { 'rabbitmq-v6-adm': domain => 'ip6', description => 'rabbitmq connections', rule => '&SERVICE_RANGE(tcp, 5671, $DSA_V6_IPS)' @@ -59,21 +59,21 @@ class roles::pubsub { $you6 = '2001:41c8:1000:21::21:16' } - @ferm::rule { 'rabbitmq_cluster': + ferm::rule { 'rabbitmq_cluster': domain => 'ip', description => 'rabbitmq cluster connections', rule => "proto tcp mod state state (NEW) saddr (${you}) ACCEPT" } - @ferm::rule { 'rabbitmq_cluster_v6': + ferm::rule { 'rabbitmq_cluster_v6': domain => 'ip6', description => 'rabbitmq cluster connections', rule => "proto tcp mod state state (NEW) saddr (${you6}) ACCEPT" } - @ferm::rule { 'rabbitmq_mgmt': + ferm::rule { 'rabbitmq_mgmt': description => 'rabbitmq cluster connections', rule => '&SERVICE_RANGE(tcp, 15671, $DSA_IPS)' } - @ferm::rule { 'rabbitmq_mgmt_v6': + ferm::rule { 'rabbitmq_mgmt_v6': domain => '(ip6)', description => 'rabbitmq cluster connections', rule => '&SERVICE_RANGE(tcp, 15671, $DSA_V6_IPS)'