inital commit

manifests/firewall/iptables.pp

@@ -0,0 +1,55 @@
+## cd_haproxy::firewall::iptables.pp
+# Module name: cd_haproxy
+# Author: Arne Teuke (arne_teuke@confdroid.com)
+# License:
+#    This file is part of cd_haproxy.
+#
+#    cd_haproxy is used for providing automatic configuration of HA proxy.
+#    Copyright (C) 2017  confdroid (copyright@confdroid.com)
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU General Public License as published by
+#    the Free Software Foundation, either version 3 of the License, or
+#    (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU General Public License for more details.
+#
+#    You should have received a copy of the GNU General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+# @summary manage firewall settings through cd_firewall or puppetlabs-firewall
+###############################################################################
+class cd_haproxy::firewall::iptables (
+
+) inherits cd_haproxy::params {
+
+  if ($fqdn == $hy_host_fqdn) and ($hy_manage_fw == true) {
+
+    require cd_haproxy::main::files
+
+    if $hy_proxy_mode == 'http' {
+
+      firewall { "${hy_fw_order_no}80 tcp port 80":
+        proto   => 'tcp',
+        dport   => '80',
+        action  => 'accept',
+      }
+    }
+
+    if $hy_proxy_mode == 'tcp' {
+
+      firewall { "${hy_fw_order_no}${hy_fe_port} tcp port ${hy_fe_port}":
+        proto   => 'tcp',
+        dport   => $hy_fe_port,
+        action  => 'accept',
+      }
+    }
+  }
+
+  if $fqdn == $hy_host_fqdn {
+
+    require cd_haproxy::main::files
+
+  }
+}