OP#414 edit iptables

2026-02-05 16:05:01 +01:00
parent e92fc73f11
commit b47ff01234
1 changed files with 6 additions and 4 deletions
--- a/manifests/firewall/iptables.pp
+++ b/manifests/firewall/iptables.pp
@@ -12,10 +12,12 @@ class confdroid_gitea::firewall::iptables (
      dport => $ga_http_port,
      jump  => 'accept',
    }
-    firewall { "${ga_order_prefix}${ga_ssh_port} allow gitea ssh port ${ga_ssh_port}":
-      proto => 'tcp',
-      dport => $ga_ssh_port,
-      jump  => 'accept',
+    if $ga_start_ssh != false {
+      firewall { "${ga_order_prefix}${ga_ssh_port} allow gitea ssh port ${ga_ssh_port}":
+        proto => 'tcp',
+        dport => $ga_ssh_port,
+        jump  => 'accept',
+      }
    }
  }
 }