include timezone
include syslog-ng::vserver
+ case $puppetmaster_port {
+ '': { $puppetmaster_port = "8140" }
+ }
+
+ case $puppetmaster_nonssl_port {
+ '': { $puppetmaster_nonssl_port = "8141" }
+ }
+
backupninja::sys { "sys":
ensure => present,
partitions => false,
shorewall::rule { 'puppetmaster-1':
action => 'DNAT',
source => 'net',
- destination => "fw:192.168.0.$context:8140",
+ destination => "fw:192.168.0.$context:$puppetmaster_port",
proto => 'tcp',
- destinationport => '8140',
+ destinationport => "$puppetmaster_port",
ratelimit => '-',
order => '700',
}
shorewall::rule { 'puppetmaster-2':
action => 'DNAT',
source => 'net',
- destination => "fw:192.168.0.$context:8140",
+ destination => "fw:192.168.0.$context:$puppetmaster_port",
proto => 'udp',
- destinationport => '8140',
+ destinationport => "$puppetmaster_port",
ratelimit => '-',
order => '701',
}
shorewall::rule { 'puppetmaster-3':
action => 'DNAT',
source => '$FW',
- destination => "fw:192.168.0.$context:8140",
+ destination => "fw:192.168.0.$context:$puppetmaster_port",
proto => 'tcp',
- destinationport => '8140',
+ destinationport => "$puppetmaster_port",
originaldest => "$ipaddress",
ratelimit => '-',
order => '702',
shorewall::rule { 'puppetmaster-4':
action => 'DNAT',
source => '$FW',
- destination => "fw:192.168.0.$context:8140",
+ destination => "fw:192.168.0.$context:$puppetmaster_port",
proto => 'udp',
- destinationport => '8140',
+ destinationport => "$puppetmaster_port",
originaldest => "$ipaddress",
ratelimit => '-',
order => '703',
shorewall::rule { 'puppetmaster-5':
action => 'DNAT',
source => 'net',
- destination => "fw:192.168.0.$context:8141",
+ destination => "fw:192.168.0.$context:$puppetmaster_nonssl_port",
proto => 'tcp',
- destinationport => '8141',
+ destinationport => "$puppetmaster_nonssl_port",
ratelimit => '-',
order => '704',
}
shorewall::rule { 'puppetmaster-6':
action => 'DNAT',
source => 'net',
- destination => "fw:192.168.0.$context:8141",
+ destination => "fw:192.168.0.$context:$puppetmaster_nonssl_port",
proto => 'udp',
- destinationport => '8141',
+ destinationport => "$puppetmaster_nonssl_port",
ratelimit => '-',
order => '705',
}
shorewall::rule { 'puppetmaster-7':
action => 'DNAT',
source => '$FW',
- destination => "fw:192.168.0.$context:8141",
+ destination => "fw:192.168.0.$context:$puppetmaster_nonssl_port",
proto => 'tcp',
- destinationport => '8141',
+ destinationport => "$puppetmaster_nonssl_port",
originaldest => "$ipaddress",
ratelimit => '-',
order => '706',
shorewall::rule { 'puppetmaster-8':
action => 'DNAT',
source => '$FW',
- destination => "fw:192.168.0.$context:8141",
+ destination => "fw:192.168.0.$context:$puppetmaster_nonssl_port",
proto => 'udp',
- destinationport => '8141',
+ destinationport => "$puppetmaster_nonssl_port",
originaldest => "$ipaddress",
ratelimit => '-',
order => '707',