class firewall::rules::in::puppetdbapi (
  Array[Stdlib::Port] $ports = [8080,8081],
) {

  $ports.each |$port| {
    nftables::rule { "default_in-puppetdbapi_${port}":
      content => "tcp dport ${port} accept",
    }
  }
}