puppet-prod/modules/firewall/manifests/rules/in/exporters.pp
Ben Vincent ce12303576 feat: add firewall module
- add nftables/ipset modules
- add custom firewall module
2024-11-03 03:32:20 +11:00

14 lines
345 B
Puppet

# 9100: node_exporter
# 9558: sysstemd_exporter
class firewall::rules::in::exporters (
Array[Stdlib::Port] $ports = [9100,9558],
String $ipset = 'prometheus',
) {
$ports.each |$port| {
nftables::rule { "default_in-metrics_exporter_tcp_${port}":
content => "tcp dport ${port} ip saddr @${ipset} accept",
}
}
}