confdroid/confdroid_nrpe
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

OP#421 try global parameter

Browse Source
This commit is contained in:
Arne Teuke
2026-02-13 16:32:35 +01:00
parent b6c9f3d83c
commit f06cb226fd
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
manifests/firewall/iptables.pp
View File

@@ -9,7 +9,7 @@ class confdroid_nrpe::firewall::iptables (
) inherits confdroid_nrpe::params { ) inherits confdroid_nrpe::params {
if $ne_incl_fw == true { if $ne_incl_fw == true {
firewall { "${ne_fw_order_no}${ne_nrpe_port} port ${ne_nrpe_port}": firewall { "${ne_fw_order_no}${ne_nrpe_port} port ${ne_nrpe_port}":
source => $nagios_server, source => $ne_nagios_source,
proto => 'tcp', proto => 'tcp',
dport => $ne_nrpe_port, dport => $ne_nrpe_port,
jump => 'accept', jump => 'accept',

4
manifests/params.pp
View File

@@ -74,6 +74,9 @@
# @param [Array] reqpackages which packages to install # @param [Array] reqpackages which packages to install
# @param [Boolean] ne_manage_cmds Whether to manage command rules for NRPE # @param [Boolean] ne_manage_cmds Whether to manage command rules for NRPE
# checks, to allow dynamic check & command rules. # checks, to allow dynamic check & command rules.
# @param [String] ne_nagios_source the source address for the firewall rule.
# Adjust to your environment if needed. Default is '0.0.0.0/0' to allow
# all sources, but it is recommended to specify the nagios server IP or subnet.
############################################################################### ###############################################################################
class confdroid_nrpe::params ( class confdroid_nrpe::params (
@@ -120,6 +123,7 @@ class confdroid_nrpe::params (
# firewall # firewall
Boolean $ne_incl_fw = true, Boolean $ne_incl_fw = true,
String $ne_fw_order_no = '50', String $ne_fw_order_no = '50',
String $ne_nagios_source = '0.0.0.0/0',
# selinux # selinux
Boolean $ne_include_selinux = true, Boolean $ne_include_selinux = true,