mirror of https://github.com/zulip/zulip.git
22 lines
484 B
ObjectPascal
22 lines
484 B
ObjectPascal
|
# @summary Adds an iptables "allow" rule for the host for a port.
|
||
|
|
#
|
||
|
|
# Rules with the same ordering are ordered by the rule name.
|
||
|
|
#
|
||
|
|
define zulip_ops::firewall_allow (
|
||
|
|
$port = '',
|
||
|
|
$proto = 'tcp',
|
||
|
|
$order = '50',
|
||
|
|
) {
|
||
|
|
if $port == '' {
|
||
|
|
$portname = $name
|
||
|
|
} else {
|
||
|
|
$portname = $port
|
||
|
|
}
|
||
|
|
|
||
|
|
concat::fragment { "iptables_${portname}":
|
||
|
|
target => '/etc/iptables/rules.v4',
|
||
|
|
order => $order,
|
||
|
|
content => "-A INPUT -p ${proto} --dport ${portname} -j ACCEPT\n",
|
||
|
|
}
|
||
|
|
}
|