Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/puppet/zulip_ops/manifests/camo.pp

6 lines
104 B
ObjectPascal
Raw Normal View History

puppet: Check in defensive restart-camo cron job. This was found on lb1; add it to the camo install on smokescreen.
2021-02-25 00:58:53 +01:00
class zulip_ops::camo {
include zulip::camo
puppet: Use concat fragments to place port allows next to services. This means that services will only open their ports if they are actually run, without having to clutter rules.v4 with a log of `if` statements. This does not go as far as using `puppetlabs/firewall`[1] because that would represent an additional DSL to learn; raw IPtables sections can easily be inserted into the generated iptables file via `concat::fragment` (either inline, or as a separate file), but config can be centralized next to the appropriate service. [1] https://forge.puppet.com/modules/puppetlabs/firewall
2021-05-25 04:12:28 +02:00
zulip_ops::firewall_allow { 'camo': port => '9292' }
puppet: Check in defensive restart-camo cron job. This was found on lb1; add it to the camo install on smokescreen.
2021-02-25 00:58:53 +01:00
}