|
32 | 32 | udp_port => '5071', |
33 | 33 | } |
34 | 34 |
|
35 | | - $firewall_irc_rules_str = join( |
36 | | - query_facts('Class[Role::Mediawiki] or Class[Role::Mediawiki_task] or Class[Role::Mediawiki_beta]', ['networking']) |
37 | | - .map |$key, $value| { |
38 | | - if ( $value['networking']['interfaces']['ens19'] and $value['networking']['interfaces']['ens18'] ) { |
39 | | - "${value['networking']['interfaces']['ens19']['ip']} ${value['networking']['interfaces']['ens18']['ip']} ${value['networking']['interfaces']['ens18']['ip6']}" |
40 | | - } elsif ( $value['networking']['interfaces']['ens18'] ) { |
41 | | - "${value['networking']['interfaces']['ens18']['ip']} ${value['networking']['interfaces']['ens18']['ip6']}" |
42 | | - } else { |
43 | | - "${value['networking']['ip']} ${value['networking']['ip6']}" |
44 | | - } |
45 | | - } |
46 | | - .flatten() |
47 | | - .unique() |
48 | | - .sort(), |
49 | | - ' ' |
50 | | - ) |
| 35 | + $subquery = @("PQL") |
| 36 | + (resources { type = 'Class' and title = 'Role::Mediawik' } or |
| 37 | + resources { type = 'Class' and title = 'Role::Mediawiki_task' } or |
| 38 | + resources { type = 'Class' and title = 'Role::Mediawiki_beta' }) |
| 39 | + | PQL |
| 40 | + $firewall_irc_rules_str = vmlib::generate_firewall_ip($subquery) |
| 41 | + |
51 | 42 | ferm::service { 'ircrcbot': |
52 | 43 | proto => 'udp', |
53 | 44 | port => '5070', |
54 | 45 | srange => "(${firewall_irc_rules_str})", |
55 | 46 | } |
56 | 47 |
|
57 | | - $firewall_all_rules_str = join( |
58 | | - query_facts('Class[Base]', ['networking']) |
59 | | - .map |$key, $value| { |
60 | | - if ( $value['networking']['interfaces']['ens19'] and $value['networking']['interfaces']['ens18'] ) { |
61 | | - "${value['networking']['interfaces']['ens19']['ip']} ${value['networking']['interfaces']['ens18']['ip']} ${value['networking']['interfaces']['ens18']['ip6']}" |
62 | | - } elsif ( $value['networking']['interfaces']['ens18'] ) { |
63 | | - "${value['networking']['interfaces']['ens18']['ip']} ${value['networking']['interfaces']['ens18']['ip6']}" |
64 | | - } else { |
65 | | - "${value['networking']['ip']} ${value['networking']['ip6']}" |
66 | | - } |
67 | | - } |
68 | | - .flatten() |
69 | | - .unique() |
70 | | - .sort(), |
71 | | - ' ' |
72 | | - ) |
| 48 | + $firewall_all_rules_str = vmlib::generate_firewall_ip() |
| 49 | + |
73 | 50 | ferm::service { 'irclogserverbot': |
74 | 51 | proto => 'udp', |
75 | 52 | port => '5071', |
|
0 commit comments