X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fssh%2Fmanifests%2Finit.pp;h=df986bc236ac9c0544ccbcb97a652f0d8c465396;hb=7709c4b48f7dced425db4b14613c07cf0642e0b1;hp=3021e3a0e5bbd88ba5343d58127bd5ab4199d84e;hpb=6605aa629b31ed231c2dbf29c8b2f4c8585e2de7;p=mirror%2Fdsa-puppet.git diff --git a/modules/ssh/manifests/init.pp b/modules/ssh/manifests/init.pp index 3021e3a0e..df986bc23 100644 --- a/modules/ssh/manifests/init.pp +++ b/modules/ssh/manifests/init.pp @@ -1,4 +1,7 @@ -class ssh { +# @param extraports Addresses/ports to listen on, in addition to 22 +class ssh ( + Array[String] $extraports = [], +) { package { [ 'openssh-client', 'openssh-server']: ensure => installed } @@ -15,6 +18,7 @@ class ssh { } ferm::rule { 'dsa-ssh-sources': description => 'Allow SSH from DSA', + domain => '(ip ip6)', chain => 'ssh', rule => 'saddr ($SSH_SOURCES) ACCEPT' }