fix

benjamin-robertson · Jun 21, 2024 · b6a9e63 · b6a9e63
1 parent a8640d3
commit b6a9e63
Showing 1 changed file with 16 additions and 16 deletions.
diff --git a/manifests/firewall.pp b/manifests/firewall.pp
@@ -15,22 +15,22 @@
   #   proto => 'icmp',
   #   jump  => 'accept',
   # }
-  # -> firewall { '001 accept all to lo interface':
-  #   proto   => 'all',
-  #   iniface => 'lo',
-  #   jump    => 'accept',
-  # }
-  # -> firewall { '002 reject local traffic not on loopback interface':
-  #   iniface     => '! lo',
-  #   proto       => 'all',
-  #   destination => '127.0.0.1/8',
-  #   jump        => 'reject',
-  # }
-  # -> firewall { '003 accept related established rules':
-  #   proto => 'all',
-  #   state => ['RELATED', 'ESTABLISHED'],
-  #   jump  => 'accept',
-  # }
+  firewall { '001 accept all to lo interface':
+    proto   => 'all',
+    iniface => 'lo',
+    jump    => 'accept',
+  }
+  -> firewall { '002 reject local traffic not on loopback interface':
+    iniface     => '! lo',
+    proto       => 'all',
+    destination => '127.0.0.1/8',
+    jump        => 'reject',
+  }
+  -> firewall { '003 accept related established rules':
+    proto => 'all',
+    state => ['RELATED', 'ESTABLISHED'],
+    jump  => 'accept',
+  }
   # Add rules for apache
   if $observium::manage_ssl {
     firewall { "50 Allow https access ${observium::apache_sslport}":