From: Luca Filipozzi <lfilipoz@emyr.net>
Date: Thu, 3 Aug 2017 20:36:30 +0000 (+0000)
Subject: allow DC17 machine(s) to access postgres on vittoria
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=6db9d6a8427e38dc02e9fc32fe83fb499b20f368;p=mirror%2Fdsa-puppet.git

allow DC17 machine(s) to access postgres on vittoria
---

diff --git a/modules/ferm/manifests/per_host.pp b/modules/ferm/manifests/per_host.pp
index 952f52ab2..33b5f81de 100644
--- a/modules/ferm/manifests/per_host.pp
+++ b/modules/ferm/manifests/per_host.pp
@@ -8,6 +8,12 @@ class ferm::per_host {
 	}
 
 	case $::hostname {
+		vittoria: {
+			@ferm::rule { 'debconf17':
+				description     => 'temporarily allow DC17 access',
+				rule            => '&SERVICE_RANTE(tcp, 5432, (206.167.36.195/32))'
+			}
+		}
 		czerny,clementi: {
 			@ferm::rule { 'dsa-upsmon':
 				description     => 'Allow upsmon access',