Profile `icingaweb2_dev': add Exec[iptables-allow-http]

refs #6842
2014-09-30 10:59:30 +02:00 · 2014-09-30 10:59:30 +02:00 · d87058c555
parent eef13ea667
commit d87058c555
1 changed files with 8 additions and 0 deletions
--- a/.vagrant-puppet/profiles/icingaweb2_dev/manifests/init.pp
+++ b/.vagrant-puppet/profiles/icingaweb2_dev/manifests/init.pp
@ -93,4 +93,12 @@ class icingaweb2_dev {
  icingaweb2::config::module { [ 'backends', 'config', 'instances' ]:
    source  => 'puppet:///modules/icingaweb2_dev',
  }
+
+  package { 'iptables':
+    ensure => latest
+  }
+  -> exec { 'iptables-allow-http':
+    unless  => 'grep -Fxqe "-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT" /etc/sysconfig/iptables',
+    command => '/sbin/iptables -I INPUT 5 -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT && /sbin/iptables-save > /etc/sysconfig/iptables'
+  }
 }