confdroid/confdroid_haproxy
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

OP#669 add fw rule for stats port

Browse Source
This commit is contained in:
Arne Teuke
2026-09-05 12:56:23 +02:00
parent 5b20bf27ac
commit af0ddb9f36
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
manifests/firewall/iptables.pp
View File

@@ -18,5 +18,13 @@ class confdroid_haproxy::firewall::iptables (
dport => $hy_https_port, dport => $hy_https_port,
jump => 'accept', jump => 'accept',
} }
if $hy_show_stats == true {
firewall { "${hy_fw_order_no}${hy_stats_port} tcp port ${hy_stats_port}":
proto => 'tcp',
dport => $hy_stats_port,
jump => 'accept',
}
}
} }
} }

2
manifests/params.pp
View File

@@ -55,6 +55,7 @@
# @param [String] hy_be_userlist backend userlist comment # @param [String] hy_be_userlist backend userlist comment
# @param [Boolean] hy_manage_be_users whether to manage backend users # @param [Boolean] hy_manage_be_users whether to manage backend users
# @param [Boolean] hy_selinux_allow_stats whether to allow stats in selinux # @param [Boolean] hy_selinux_allow_stats whether to allow stats in selinux
# @param [String] hy_stats_port the port to use for stats. used in firewall settings
############################################################################### ###############################################################################
class confdroid_haproxy::params ( class confdroid_haproxy::params (
@@ -76,6 +77,7 @@ class confdroid_haproxy::params (
# main config # main config
String $hy_http_port = '80', String $hy_http_port = '80',
String $hy_https_port = '443', String $hy_https_port = '443',
String $hy_stats_port = '8404',
String $hy_chroot = '/var/lib/haproxy', String $hy_chroot = '/var/lib/haproxy',
String $hy_pid = '/var/run/haproxy.pid', String $hy_pid = '/var/run/haproxy.pid',
String $hy_maxconn = '4000', String $hy_maxconn = '4000',