annotate modules/my_fw/manifests/init.pp @ 279:e36b7f4f85f2
Start to support IPv6 servers
* Assumed only one or the other, not dual stack
* Removed old VPS setup
* Removed "secondary IP", added IPv4-to-6 forwarding
* Updated firewall rules
* Moved HTTP firewall rules to website module so it can do the
right thing based on IP address families
| author |
IBBoard <dev@ibboard.co.uk> |
| date |
Sat, 15 Feb 2020 13:52:30 +0000 |
| parents |
|
| children |
66c406eec60d |
| rev |
line source |
|
279
|
1 class my_fw ($ip_version) {
|
|
|
2 Firewall <| |> {
|
|
|
3 provider => $ip_version == "IPv6" ? { true => 'ip6tables', default => 'iptables'},
|
|
|
4 }
|
|
|
5 class { ['my_fw::pre', 'my_fw::post']: }
|
|
|
6 class { 'firewall':
|
|
|
7 ensure => $ip_version == "IPv6" ? { true => 'stopped', default => 'running'},
|
|
|
8 ensure_v6 => $ip_version == "IPv6" ? { true => 'running', default => 'stopped'},
|
|
|
9 }
|
|
|
10 } |
