Puppet Class: varnish::firewall

Defined in:
manifests/firewall.pp

Summary

Uses `puppetlabs/firewall` module to open varnish listen port

Overview

Parameters:

  • manage_firewall (Boolean) (defaults to: false) —

    Manage firewall

  • varnish_listen_port (Stdlib::Port) (defaults to: 6081) —

    Port where varnish listens to



7
8
9
10
11
12
13
14
15
16
17
18
19
20
 
# File 'manifests/firewall.pp', line 7

class varnish::firewall (
  Boolean      $manage_firewall     = false,
  Stdlib::Port $varnish_listen_port = 6081,
) {
  if $manage_firewall {
    firewall { "100 allow port ${varnish_listen_port} to varnish":
      chain => 'INPUT',
      proto => 'tcp',
      state => ['NEW'],
      dport => $varnish_listen_port,
      jump  => 'accept',
    }
  }
}