From 561b1fd91dce22a03edd37017eaa4dafca342deb Mon Sep 17 00:00:00 2001
From: Gardouille <gardouille@gmail.com>
Date: Wed, 21 Jan 2015 17:05:42 +0100
Subject: [PATCH] * (#9) Add a puppetlabs-firewall rule.

---
 CHANGELOG.md                   |  3 ++-
 manifests/hypervisor.pp        |  1 +
 manifests/hypervisor/config.pp | 11 +++++++++++
 manifests/params.pp            |  3 +++
 4 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ccfa25c..43c61bd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,8 +3,9 @@
 ##### Changes
 * README.md: Add examples, a table of contents.
 * Correct indentation, double quote, ...
-* (#2) Add an array and a file to load additionnal module.
+* (#2) Add an array and a file to load additionnal modules.
 * Correct module's dependencies.
+* (#9) Add a puppetlabs-firewall rule.
 
 ---------------------------------------
 
diff --git a/manifests/hypervisor.pp b/manifests/hypervisor.pp
index 1fe78af..e99d230 100644
--- a/manifests/hypervisor.pp
+++ b/manifests/hypervisor.pp
@@ -56,6 +56,7 @@ class proxmox::hypervisor (
   $pve_modules_list           = $proxmox::params::pve_modules_list,
   $pve_modules_file_path      = $proxmox::params::pve_modules_file_path,
   $pve_modules_file_content   = $proxmox::params::pve_modules_file_content,
+  $labs_firewall_rule         = $proxmox::params::labs_firewall_rule,
 ) inherits proxmox::params {
 
   include '::proxmox::hypervisor::preconfig'
diff --git a/manifests/hypervisor/config.pp b/manifests/hypervisor/config.pp
index d32d7e4..74fd199 100644
--- a/manifests/hypervisor/config.pp
+++ b/manifests/hypervisor/config.pp
@@ -34,4 +34,15 @@ class proxmox::hypervisor::config {
 
   }
 
+  if $proxmox::hypervisor::labs_firewall_rule == true {
+
+    firewall { '100 accept proxmox':
+      proto  => 'tcp',
+      action => 'accept',
+      port   =>  ['8006', '5900']
+    }
+
+  }
+
+
 } # Private class: proxmox::hypervisor::config
diff --git a/manifests/params.pp b/manifests/params.pp
index cb957a2..55448ff 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -38,6 +38,9 @@ class proxmox::params {
         $pve_modules_file_path      = '/etc/modules-load.d/proxmox.conf'
         $pve_modules_file_content   = 'proxmox/hypervisor/proxmox_modules.conf.erb'
 
+        # Firewall
+        $labs_firewall_rule         = false
+
       }
     }
     default: {