Puppet Class: profile::mariadb::ferm_misc

Defined in:
modules/profile/manifests/mariadb/ferm_misc.pp

Overview

Firewall rules for the misc db host used by internet-facing websites. We need special rules to allow access for some services which run on hosts with public IPs.



4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
# File 'modules/profile/manifests/mariadb/ferm_misc.pp', line 4

class profile::mariadb::ferm_misc {
    ferm::service { 'netmon-librenms':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve((netmon1002.wikimedia.org netmon2001.wikimedia.org))',
    }
    ferm::service { 'netbox-librenms-reports':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve((netbox1001.wikimedia.org netbox2001.wikimedia.org))',
    }
    ferm::service { 'rt':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve(moscovium.eqiad.wmnet)',
    }

    ferm::service { 'exim':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve((mx1001.wikimedia.org mx2001.wikimedia.org wiki-mail-eqiad.wikimedia.org wiki-mail-codfw.wikimedia.org))',
    }

    ferm::service { 'idp_staging':
        proto   => 'tcp',
        port    => '3306',
        notrack => true,
        srange  => '@resolve((idp-test1001.wikimedia.org idp-test2001.wikimedia.org))',
    }
}