OP#414 add fw section

manifests/firewall/iptables.pp

@@ -6,5 +6,16 @@
 class confdroid_gitea::firewall::iptables (
 
 ) inherits confdroid_gitea::params {
-  
+  if $ga_use_firewall == true {
+    firewall { "${ga_order_prefix}${ga_http_port} allow gitea http port ${ga_http_port}":
+      proto => 'tcp',
+      dport => $ga_http_port,
+      jump  => 'accept',
+    }
+    firewall { "${ga_order_prefix}${ga_ssh_port} allow gitea ssh port ${ga_ssh_port}":
+      proto => 'tcp',
+      dport => $ga_ssh_port,
+      jump  => 'accept',
+    }
+  }
 }