Commit 0c934ab4 authored by Adam Lewenberg's avatar Adam Lewenberg
Browse files

1.2.0: default to base:iptables

parent bbc65830

CHANGELOG

+6 −3
Original line number Diff line number Diff line
@@ -7,12 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 


The date string is generated with this command: `date --iso-8601=seconds`.



## [1.1.0] - 2025-06-23T13:34:28-07:00

## [1.2.0] - 2025-06-23T13:45:00-07:00



### Changed



- Use the su_iptables Puppet module (hosted at https://code.stanford.edu/puppetpublic/su_iptables)

  instead of base::iptables.

- When setting iptables rules the default is to use the base::iptables

  module. However, if "use_base_iptables" parameter is set to "false" use

  the su_iptables Puppet module (hosted at

  https://code.stanford.edu/puppetpublic/su_iptables) instead of

  base::iptables.



## [1.0.0] - 2025-06-23T13:01:28-07:00

manifests/init.pp

+15 −6
Original line number Diff line number Diff line
@@ -4,6 +4,7 @@ 
class su_apache (

  Boolean $include_webauth   = false,

  Boolean $manage_iptables   = true,

  Boolean $use_base_iptables = true,

)

{

  if ($include_webauth) {
@@ -57,6 +58,13 @@ class su_apache ( 
  include su_apache::filter_syslog



  if ($manage_iptables) {

    if ($use_base_iptables) {

      base::iptables::rule { 'web':

        description => 'Allow web accesses from anywhere',

        protocol    => 'tcp',

        port        => [ 80, 443 ],

      }

    } else {

      su_iptables::rule { 'web':

        description => 'Allow web accesses from anywhere',

        protocol    => 'tcp',
@@ -64,3 +72,4 @@ class su_apache ( 
      }

    }

  }

}