addcode

manifests/init.pp

@@ -28,9 +28,21 @@
 #
 class egg (
 ) {
-  ::server_firewall::rules_file { '30-permit_http_https.rules':
-    content => epp("${module_name}/permit_http_https.rules.epp", {
-        module_name => $module_name,
-    }),
+  include egg::nginx
+  include egg::postgres
+  include egg::nodejs
+
+  server_firewall::address_set { 'liu_vpn':
+    addresses => [
+      '10.243.0.0/16',
+    ],
+  }
+
+  firewalld_rich_rule { 'allow ssh via vpn':
+    action  => 'accept',
+    service => 'ssh',
+    source  => { 'ipset' => 'liu_vpn_v4', },
+    family  => 'ipv4',
+    zone    => 'liu',
   }
 }