add more admin firewall access

[dsa-puppet.git] / modules / roles / manifests / pubsub.pp

diff --git a/modules/roles/manifests/pubsub.pp b/modules/roles/manifests/pubsub.pp
index 2aaad04f8c5399714f67fe48afbf9a6c21c48989..43f2c6f2044dacddd163bb149844adec3bf9e591 100644 (file)
--- a/modules/roles/manifests/pubsub.pp
+++ b/modules/roles/manifests/pubsub.pp
@@ -187,6 +187,17 @@ class roles::pubsub {
                rule        => '&SERVICE_RANGE(tcp, 5671, $HOST_DEBIAN_V6)'
        }
 
+       @ferm::rule { 'rabbitmq-adm':
+               description => 'rabbitmq connections',
+               rule        => '&SERVICE_RANGE(tcp, 5671, $DSA_IPS)'
+       }
+
+       @ferm::rule { 'rabbitmq-v6-adm':
+               domain      => 'ip6',
+               description => 'rabbitmq connections',
+               rule        => '&SERVICE_RANGE(tcp, 5671, $DSA_V6_IPS)'
+       }
+
        if $::hostname == $cc_master {
                $you = $cc_secondary
        } else {