## confdroid_gitea::firewall::iptables.pp
# Module name: confdroid_gitea
# Author: 12ww1160 (12ww1160@confdroid.com)
# @summary manages the firewall rules for the confdroid_gitea Puppet module.
##############################################################################
class confdroid_gitea::firewall::iptables (

) inherits confdroid_gitea::params {
  if ($ga_use_firewall == true) and ($ga_host_fqdn == $fqdn) {
    firewall { "${ga_order_prefix}${ga_http_port} allow gitea http port ${ga_http_port}":
      proto => 'tcp',
      dport => $ga_http_port,
      jump  => 'accept',
    }
    if $ga_start_ssh != false {
      firewall { "${ga_order_prefix}${ga_ssh_port} allow gitea ssh port ${ga_ssh_port}":
        proto => 'tcp',
        dport => $ga_ssh_port,
        jump  => 'accept',
      }
    }
  }
}