7 Commits

Author	SHA1	Message	Date
Alex Vandiver	0c46bbdf9f	puppet: Update dependencies.	2023-03-23 09:50:30 -07:00
Alex Vandiver	e7fabb45f2	puppet: Pin with sha256sum verification.	2023-02-28 00:04:39 -05:00
Alex Vandiver	03f0cb07ff	puppet: Upgrade puppetlabs libraries.	2022-11-08 13:26:32 -08:00
Alex Vandiver	ed19361838	puppet: Upgrade puppetlabs libraries.	2022-10-10 08:46:29 -07:00
Alex Vandiver	48263a01dd	puppet: Upgrade puppet libraries.	2022-02-09 20:32:24 -08:00
Alex Vandiver	c9141785fd	puppet: Use concat fragments to place port allows next to services. ... This means that services will only open their ports if they are actually run, without having to clutter rules.v4 with a log of `if` statements. This does not go as far as using `puppetlabs/firewall`[1] because that would represent an additional DSL to learn; raw IPtables sections can easily be inserted into the generated iptables file via `concat::fragment` (either inline, or as a separate file), but config can be centralized next to the appropriate service. [1] https://forge.puppet.com/modules/puppetlabs/firewall	2021-05-27 21:14:48 -07:00
Alex Vandiver	87a109e3e0	puppet: Pull in pinned puppet modules. ... Using puppet modules from the puppet forge judiciously will allow us to simplify the configuration somewhat; this specifically pulls in the stdlib module, which we were already using parts of.	2021-05-27 21:14:48 -07:00