firwalling for pg basebackup

[mirror/dsa-puppet.git] / modules / postgres / manifests / backup_server / register_backup_clienthost.pp

diff --git a/modules/postgres/manifests/backup_server/register_backup_clienthost.pp b/modules/postgres/manifests/backup_server/register_backup_clienthost.pp
index 5dff845..8c288dd 100644 (file)
--- a/modules/postgres/manifests/backup_server/register_backup_clienthost.pp
+++ b/modules/postgres/manifests/backup_server/register_backup_clienthost.pp
@@ -23,4 +23,6 @@ define postgres::backup_server::register_backup_clienthost (
     from        => $base::public_addresses,
     collect_tag => $postgres::backup_server::globals::tag_source_sshkey,
   }
+
+  Ferm::Rule::Simple <<| tag == 'postgres::backup_server::to-client' |>>
 }