Puppet Class: cd_haproxy::firewall::iptables

Inherits:
cd_haproxy::params
Defined in:
manifests/firewall/iptables.pp

Summary

manage firewall settings through cd_firewall or puppetlabs-firewall

Overview

cd_haproxy::firewall::iptables.pp Module name: cd_haproxy Author: Arne Teuke (arne_teuke@confdroid.com) License: This file is part of cd_haproxy.

cd_haproxy is used for providing automatic configuration of HA proxy. Copyright (C) 2017 confdroid (copyright@confdroid.com) This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see www.gnu.org/licenses/.



23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
 
# File 'manifests/firewall/iptables.pp', line 23

class cd_haproxy::firewall::iptables (

) inherits cd_haproxy::params {

  if ($fqdn == $hy_host_fqdn) and ($hy_manage_fw == true) {

    require cd_haproxy::main::files

    if $hy_proxy_mode == 'http' {

      firewall { "${hy_fw_order_no}80 tcp port 80":
        proto   => 'tcp',
        dport   => '80',
        action  => 'accept',
      }
    }

    if $hy_proxy_mode == 'tcp' {

      firewall { "${hy_fw_order_no}${hy_fe_port} tcp port ${hy_fe_port}":
        proto   => 'tcp',
        dport   => $hy_fe_port,
        action  => 'accept',
      }
    }
  }

  if $fqdn == $hy_host_fqdn {

    require cd_haproxy::main::files

  }
}