add https ferm rule to apache class for now

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/modules/apache2/manifests/init.pp b/modules/apache2/manifests/init.pp
index 3084c11..a0e8106 100644 (file)
--- a/modules/apache2/manifests/init.pp
+++ b/modules/apache2/manifests/init.pp
@@ -161,13 +161,13 @@ class apache2 {
     @ferm::rule { "dsa-http":
         prio            => "23",
         description     => "Allow web access",
-        rule            => "proto tcp dport http jump http;"
+        rule            => "proto tcp dport (http https) jump http;"
     }
     @ferm::rule { "dsa-http-v6":
         domain          => "(ip6)",
         prio            => "23",
         description     => "Allow web access",
-        rule            => "&SERVICE(tcp, 80)"
+        rule            => "&SERVICE(tcp, (http https))"
     }
 }
 # vim:set et: