summaryrefslogtreecommitdiff
path: root/manifests
diff options
context:
space:
mode:
authorHugo Hörnquist <hugo@lysator.liu.se>2022-02-06 14:22:32 +0100
committerHugo Hörnquist <hugo@lysator.liu.se>2022-02-09 18:06:59 +0100
commitd0e113b64b3a6113cd6018bd437d2d65fe669fe7 (patch)
tree27fccebf4707bc87388c672d064d7d25aff0607d /manifests
parentRewrote how firewall is handled. (diff)
downloadprofiles-d0e113b64b3a6113cd6018bd437d2d65fe669fe7.tar.gz
profiles-d0e113b64b3a6113cd6018bd437d2d65fe669fe7.tar.xz
Add nginx profile.
Diffstat (limited to 'manifests')
-rw-r--r--manifests/nginx.pp16
1 files changed, 16 insertions, 0 deletions
diff --git a/manifests/nginx.pp b/manifests/nginx.pp
new file mode 100644
index 0000000..61ce87d
--- /dev/null
+++ b/manifests/nginx.pp
@@ -0,0 +1,16 @@
+class profiles::nginx {
+ include ::nginx
+
+ firewall { '100 allow HTTP':
+ proto => 'tcp',
+ dport => [ 'http', 'https', ],
+ action => accept,
+ }
+
+ firewall { '100 allow HTTP IPv6':
+ proto => 'tcp',
+ dport => [ 'http', 'https', ],
+ action => accept,
+ provider => 'ip6tables',
+ }
+}