From e0354eda8f1dba999c452caf99c40dcb6f7af33e Mon Sep 17 00:00:00 2001
From: varac <varacanero@zeromail.org>
Date: Tue, 19 Mar 2013 08:57:35 +0100
Subject: working on stunnel for bigcouch clustering

---
 puppet/modules/site_shorewall/manifests/couchdb.pp | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

(limited to 'puppet/modules/site_shorewall')

diff --git a/puppet/modules/site_shorewall/manifests/couchdb.pp b/puppet/modules/site_shorewall/manifests/couchdb.pp
index 9fa59569..5fa1861b 100644
--- a/puppet/modules/site_shorewall/manifests/couchdb.pp
+++ b/puppet/modules/site_shorewall/manifests/couchdb.pp
@@ -3,10 +3,13 @@ class site_shorewall::couchdb {
   include site_shorewall::defaults
 
   $couchdb_port = '6984'
+  # Erlang Port Mapper daemon, used for communication between
+  # bigcouch cluster nodes
+  $portmapper_port = '5369'
 
   # define macro for incoming services
   file { '/etc/shorewall/macro.leap_couchdb':
-    content => "PARAM   -       -       tcp    $couchdb_port",
+    content => "PARAM   -       -       tcp    $couchdb_port $portmapper_port",
     notify  => Service['shorewall'],
     require => Package['shorewall']
   }
@@ -20,4 +23,15 @@ class site_shorewall::couchdb {
         order       => 200;
   }
 
+  shorewall::rule {
+    'dnat-bigcouch-clustering-to-stunnel':
+      destination     => "net:${::ipaddress}:8080",
+      destinationport => $portmapper_port,
+      source          => '$FW',
+      proto           => 'tcp',
+      order           => 200,
+      action          => 'DNAT';
+  }
+
+
 }
-- 
cgit v1.2.3