From: Julien Cristau <jcristau@debian.org>
Date: Thu, 1 Nov 2018 17:32:53 +0000 (+0100)
Subject: Drop firewall rule for pg @ sibelius
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=cc1c50162128c163b5f3fab802e290da338f5a29;p=mirror%2Fdsa-puppet.git

Drop firewall rule for pg @ sibelius
---

diff --git a/modules/ferm/manifests/per_host.pp b/modules/ferm/manifests/per_host.pp
index e40d306ea..1ba00ad76 100644
--- a/modules/ferm/manifests/per_host.pp
+++ b/modules/ferm/manifests/per_host.pp
@@ -265,26 +265,6 @@ class ferm::per_host {
 				rule            => '&SERVICE_RANGE(tcp, 5432, ( $HOST_PGBACKUPHOST_V6 ))'
 			}
 		}
-		sibelius: {
-			@ferm::rule { 'dsa-postgres-backup':
-				description     => 'Allow postgress access',
-				rule            => '&SERVICE_RANGE(tcp, 5433, ( $HOST_PGBACKUPHOST_V4 ))'
-			}
-			@ferm::rule { 'dsa-postgres-backup6':
-				domain          => 'ip6',
-				description     => 'Allow postgress access',
-				rule            => '&SERVICE_RANGE(tcp, 5433, ( $HOST_PGBACKUPHOST_V6 ))'
-			}
-			@ferm::rule { 'dsa-postgres-replication':
-				description     => 'Allow postgress access',
-				rule            => '&SERVICE_RANGE(tcp, 5433, ( 185.17.185.187/32 193.62.202.26/32 ))'
-			}
-			@ferm::rule { 'dsa-postgres-replication6':
-				domain          => 'ip6',
-				description     => 'Allow postgress access',
-				rule            => '&SERVICE_RANGE(tcp, 5433, ( 2001:1af8:4020:b030:deb::187/128 2001:630:206:4000:1a1a:0:c13e:ca1a/128 ))'
-			}
-		}
 		sallinen: {
 			@ferm::rule { 'dsa-postgres-backup':
 				description     => 'Allow postgress access',