From b47ff01234b890c5a05dec89e0255cb93d82b357 Mon Sep 17 00:00:00 2001
From: Arne Teuke <arne_teuke@confdroid.com>
Date: Thu, 5 Feb 2026 16:05:01 +0100
Subject: [PATCH] OP#414 edit iptables

---
 manifests/firewall/iptables.pp | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/manifests/firewall/iptables.pp b/manifests/firewall/iptables.pp
index 0e5c5fc..27e329c 100644
--- a/manifests/firewall/iptables.pp
+++ b/manifests/firewall/iptables.pp
@@ -12,10 +12,12 @@ class confdroid_gitea::firewall::iptables (
       dport => $ga_http_port,
       jump  => 'accept',
     }
-    firewall { "${ga_order_prefix}${ga_ssh_port} allow gitea ssh port ${ga_ssh_port}":
-      proto => 'tcp',
-      dport => $ga_ssh_port,
-      jump  => 'accept',
+    if $ga_start_ssh != false {
+      firewall { "${ga_order_prefix}${ga_ssh_port} allow gitea ssh port ${ga_ssh_port}":
+        proto => 'tcp',
+        dport => $ga_ssh_port,
+        jump  => 'accept',
+      }
     }
   }
 }