Puppet Class: profile::mariadb::ferm_misc

Defined in:
modules/profile/manifests/mariadb/ferm_misc.pp

Overview

Firewall rules for the misc db host used by internet-facing websites. We need special rules to allow access for some services which run on hosts with public IPs.



4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
# File 'modules/profile/manifests/mariadb/ferm_misc.pp', line 4

class profile::mariadb::ferm_misc {
    ferm::service { 'netmon-tools-stretch':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve(netmon1002.wikimedia.org)',
    }

    ferm::service { 'servermon-jessie':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve(netmon1003.wikimedia.org)',
    }

    ferm::service { 'rt':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve(ununpentium.wikimedia.org)',
    }

    ferm::service { 'gerrit':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve(cobalt.wikimedia.org)',
    }

    ferm::service { 'exim':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve((mx1001.wikimedia.org mx2001.wikimedia.org wiki-mail-eqiad.wikimedia.org wiki-mail-codfw.wikimedia.org))',
    }
}