class profiles::nginx {
  include ::nginx

  firewall { '100 allow HTTP':
    proto  => 'tcp',
    dport  => [ 'http', 'https', ],
    action => accept,
  }

  firewall { '100 allow HTTP IPv6':
    proto    => 'tcp',
    dport    => [ 'http', 'https', ],
    action   => accept,
    provider => 'ip6tables',
  }
}