# 9100: node_exporter
# 9558: sysstemd_exporter
class firewall::rules::in::exporters (
  Array[Stdlib::Port] $ports = [9100,9558],
  String              $ipset = 'prometheus',
) {

  $ports.each |$port| {
    nftables::rule { "default_in-metrics_exporter_tcp_${port}":
      content => "tcp dport ${port} ip saddr @${ipset} accept",
    }
  }
}