From 94afeda0bb8790581813df9fa39fa363cd8f7457 Mon Sep 17 00:00:00 2001
From: 12ww1160 <12ww1160@confdroid.com>
Date: Thu, 9 Apr 2026 15:00:41 +0200
Subject: [PATCH 1/2] OP#561 try new  fw settings

---
 manifests/firewall/iptables.pp | 11 +----------
 manifests/params.pp            |  5 +++--
 2 files changed, 4 insertions(+), 12 deletions(-)

diff --git a/manifests/firewall/iptables.pp b/manifests/firewall/iptables.pp
index 4e67d60..150bed5 100644
--- a/manifests/firewall/iptables.pp
+++ b/manifests/firewall/iptables.pp
@@ -6,17 +6,8 @@
 class confdroid_ssh::firewall::iptables (
 
 ) inherits confdroid_ssh::params {
-  case $ssh_use_firewall {
-    true, 'true', 'yes', '1': {
-      $ssh_fw_ensure = 'present'
-    }
-    default: {
-      $ssh_fw_ensure = 'absent'
-    }
-  }
-
   firewall { "${ssh_fw_order}${ssh_fw_port} allow SSH on port ${ssh_fw_port}":
-    ensure => $ssh_fw_ensure,
+    ensure => $ssh_use_firewall,
     proto  => 'tcp',
     source => $ssh_source_range,
     dport  => $ssh_fw_port,
diff --git a/manifests/params.pp b/manifests/params.pp
index 75caa70..22e8a2c 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -4,7 +4,8 @@
 # @summary Class contains all class parameters for confdroid_ssh
 # @param [Array] ssh_reqpackages packages to install
 # @param [String] pkg_ensure version to install: 'present' or 'latest'
-# @param [Boolean] ssh_use_firewall whether to manage firewall settings
+# @param [String] ssh_use_firewall whether set the fw rule to 
+#   present or absent.
 # @param [String] ssh_fw_port port to use for SSHD and in fw
 # @param [String] ssh_fw_order order of firewall rule
 # @param [String] ssh_source_range source range for firewall rule
@@ -22,7 +23,7 @@ class confdroid_ssh::params (
   String $pkg_ensure          = 'present',
 
   # firewall settings
-  Boolean $ssh_use_firewall   = true,
+  String $ssh_use_firewall   = 'present',
   String $ssh_fw_port         = '22',
   String $ssh_fw_order        = '50',
   String $ssh_source_range    = '0.0.0.0/0',

From b8d581e00d72fbcee312f7594cd4472e90f39732 Mon Sep 17 00:00:00 2001
From: Jenkins Server <jenkins@confdroid.com>
Date: Thu, 9 Apr 2026 15:01:50 +0200
Subject: [PATCH 2/2] Recommit for updates in build 15

---
 ...droid_ssh_3A_3Afirewall_3A_3Aiptables.html | 22 ++-----------------
 .../confdroid_ssh_3A_3Aparams.html            | 14 ++++++------
 2 files changed, 9 insertions(+), 27 deletions(-)

diff --git a/doc/puppet_classes/confdroid_ssh_3A_3Afirewall_3A_3Aiptables.html b/doc/puppet_classes/confdroid_ssh_3A_3Afirewall_3A_3Aiptables.html
index 935ccb0..90696db 100644
--- a/doc/puppet_classes/confdroid_ssh_3A_3Afirewall_3A_3Aiptables.html
+++ b/doc/puppet_classes/confdroid_ssh_3A_3Afirewall_3A_3Aiptables.html
@@ -111,16 +111,7 @@
 13
 14
 15
-16
-17
-18
-19
-20
-21
-22
-23
-24
-25</pre>
+16</pre>
       </td>
       <td>
         <pre class="code"><span class="info file"># File 'manifests/firewall/iptables.pp', line 6</span>
@@ -128,17 +119,8 @@
 class confdroid_ssh::firewall::iptables (
 
 ) inherits confdroid_ssh::params {
-  case $ssh_use_firewall {
-    true, &#39;true&#39;, &#39;yes&#39;, &#39;1&#39;: {
-      $ssh_fw_ensure = &#39;present&#39;
-    }
-    default: {
-      $ssh_fw_ensure = &#39;absent&#39;
-    }
-  }
-
   firewall { &quot;${ssh_fw_order}${ssh_fw_port} allow SSH on port ${ssh_fw_port}&quot;:
-    ensure =&gt; $ssh_fw_ensure,
+    ensure =&gt; $ssh_use_firewall,
     proto  =&gt; &#39;tcp&#39;,
     source =&gt; $ssh_source_range,
     dport  =&gt; $ssh_fw_port,
diff --git a/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html b/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html
index d7b6f9c..e8a8e1f 100644
--- a/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html
+++ b/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html
@@ -151,15 +151,15 @@
         <span class='name'>ssh_use_firewall</span>
       
       
-        <span class='type'>(<tt>Boolean</tt>)</span>
+        <span class='type'>(<tt>String</tt>)</span>
       
       
-        <em class="default">(defaults to: <tt>true</tt>)</em>
+        <em class="default">(defaults to: <tt>&#39;present&#39;</tt>)</em>
       
       
         &mdash;
         <div class='inline'>
-<p>whether to manage firewall settings</p>
+<p>whether set the fw rule to present or absent.</p>
 </div>
       
     </li>
@@ -355,7 +355,6 @@
         <pre class="lines">
 
 
-19
 20
 21
 22
@@ -395,10 +394,11 @@
 56
 57
 58
-59</pre>
+59
+60</pre>
       </td>
       <td>
-        <pre class="code"><span class="info file"># File 'manifests/params.pp', line 19</span>
+        <pre class="code"><span class="info file"># File 'manifests/params.pp', line 20</span>
 
 class confdroid_ssh::params (
 
@@ -406,7 +406,7 @@ class confdroid_ssh::params (
   String $pkg_ensure          = &#39;present&#39;,
 
   # firewall settings
-  Boolean $ssh_use_firewall   = true,
+  String $ssh_use_firewall   = &#39;present&#39;,
   String $ssh_fw_port         = &#39;22&#39;,
   String $ssh_fw_order        = &#39;50&#39;,
   String $ssh_source_range    = &#39;0.0.0.0/0&#39;,