From db599fac5e9d27211daa7c8c77cea74f9386d41e Mon Sep 17 00:00:00 2001
From: 12ww1160 <12ww1160@confdroid.com>
Date: Sun, 7 Jun 2026 14:33:43 +0200
Subject: [PATCH] OP#607 add FW port

---
 .vscode/settings.json          | 13 +++++++++++++
 manifests/firewall/iptables.pp |  6 ++++++
 2 files changed, 19 insertions(+)
 create mode 100644 .vscode/settings.json

diff --git a/.vscode/settings.json b/.vscode/settings.json
new file mode 100644
index 0000000..28884c3
--- /dev/null
+++ b/.vscode/settings.json
@@ -0,0 +1,13 @@
+{
+    "cSpell.words": [
+        "dontlognull",
+        "dport",
+        "httplog",
+        "maxconn",
+        "nologin",
+        "redispatch",
+        "sess",
+        "tcplog",
+        "userlist"
+    ]
+}
\ No newline at end of file
diff --git a/manifests/firewall/iptables.pp b/manifests/firewall/iptables.pp
index d5e41cc..30626e7 100644
--- a/manifests/firewall/iptables.pp
+++ b/manifests/firewall/iptables.pp
@@ -18,5 +18,11 @@ class haproxy_cd::firewall::iptables (
       dport => $hy_https_port,
       jump  => 'accept',
     }
+
+    firewall { "${hy_fw_order_no}9000 tcp port minio-api":
+      proto => 'tcp',
+      dport => '9000',
+      jump  => 'accept',
+    }
   }
 }