included firewall

manifests/firewall/iptables.pp

@@ -0,0 +1,35 @@
+## cd_nrpe::firewall::iptables.pp
+# Module name: cd_nrpe
+# Author: Arne Teuke (arne_teuke@ConfDroid.com)
+# # License:
+#    This file is part of cd_nrpe.
+#
+#    cd_nrpe is used for providing automatic configuration of NRPE.
+#    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU General Public License as published by
+#    the Free Software Foundation, either version 3 of the License, or
+#    (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU General Public License for more details.
+#
+#    You should have received a copy of the GNU General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+# @summary manage firewall settings through cd_firewall or puppetlabs-firewall
+###############################################################################
+class cd_nrpe::firewall::iptables (
+
+) inherits cd_nrpe::params {
+
+  if $ne_incl_fw == true {
+
+    firewall { "${ne_fw_order_no}${ne_nrpe_port} tcp ${ne_nrpe_port}":
+      proto   => ['tcp','udp'],
+      dport   => $ne_nrpe_port',
+      action  => 'accept',
+    }
+  }
+}

manifests/main/config.pp

@@ -4,8 +4,7 @@
 # # License:
 #    This file is part of cd_nrpe.
 #
-#    cd_nrpe is used for providing automatic configuration of
+#    cd_nrpe is used for providing automatic configuration of NRPE.
-#    <service / purpose>
 #    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
 #    This program is free software: you can redistribute it and/or modify
 #    it under the terms of the GNU General Public License as published by

manifests/main/dirs.pp

@@ -4,8 +4,7 @@
 # # License:
 #    This file is part of cd_nrpe.
 #
-#    cd_nrpe is used for providing automatic configuration of
+#    cd_nrpe is used for providing automatic configuration of NRPE.
-#    <service / purpose>
 #    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
 #    This program is free software: you can redistribute it and/or modify
 #    it under the terms of the GNU General Public License as published by

manifests/main/files.pp

@@ -4,8 +4,7 @@
 # # License:
 #    This file is part of cd_nrpe.
 #
-#    cd_nrpe is used for providing automatic configuration of
+#    cd_nrpe is used for providing automatic configuration of NRPE.
-#    <service / purpose>
 #    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
 #    This program is free software: you can redistribute it and/or modify
 #    it under the terms of the GNU General Public License as published by

manifests/main/install.pp

@@ -4,8 +4,7 @@
 # # License:
 #    This file is part of cd_nrpe.
 #
-#    cd_nrpe is used for providing automatic configuration of
+#    cd_nrpe is used for providing automatic configuration of NRPE.
-#    <service / purpose>
 #    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
 #    This program is free software: you can redistribute it and/or modify
 #    it under the terms of the GNU General Public License as published by

manifests/main/service.pp

@@ -4,8 +4,7 @@
 # # License:
 #    This file is part of cd_nrpe.
 #
-#    cd_nrpe is used for providing automatic configuration of
+#    cd_nrpe is used for providing automatic configuration of NRPE.
-#    <service / purpose>
 #    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
 #    This program is free software: you can redistribute it and/or modify
 #    it under the terms of the GNU General Public License as published by
@@ -25,6 +24,10 @@ class cd_nrpe::main::service (
 
 ) inherits cd_nrpe::params {
 
+  if $ne_incl_fw == true  {
+    require cd_nrpe::firewall::iptables
+  }
+
   require cd_nrpe::main::files
 
   service { $ne_service:

manifests/main/user.pp

@@ -4,8 +4,7 @@
 # # License:
 #    This file is part of cd_nrpe.
 #
-#    cd_nrpe is used for providing automatic configuration of
+#    cd_nrpe is used for providing automatic configuration of NRPE.
-#    <service / purpose>
 #    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
 #    This program is free software: you can redistribute it and/or modify
 #    it under the terms of the GNU General Public License as published by

manifests/params.pp

@@ -4,8 +4,7 @@
 # # License:
 #    This file is part of cd_nrpe.
 #
-#    cd_nrpe is used for providing automatic configuration of
+#    cd_nrpe is used for providing automatic configuration of NRPE.
-#    <service / purpose>
 #    Copyright (C) 2016  ConfDroid (copyright@ConfDroid.com)
 #    This program is free software: you can redistribute it and/or modify
 #    it under the terms of the GNU General Public License as published by
@@ -83,6 +82,8 @@
 # @param  [string] ne_include_file include definitions from an external
 #   config file.
 # @param  [string] ne_include_dir
+# @param  [string] ne_fw_order_no ordering prefix for he firewall rules. Adjust
+#   to yoru environment if needed.
 ###############################################################################
 class cd_nrpe::params (
 
@@ -125,7 +126,7 @@ $ne_include_file            = '',
 
 # firewall
 $ne_incl_fw                 = true,
-
+$ne_fw_order_no             = '50',
 
 
 ) {