summaryrefslogtreecommitdiff
path: root/puppet/modules/site_shorewall/manifests/couchdb.pp
blob: 5fa1861b8850e95cc85695b2cd46ce127782d73f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
class site_shorewall::couchdb {

  include site_shorewall::defaults

  $couchdb_port = '6984'
  # Erlang Port Mapper daemon, used for communication between
  # bigcouch cluster nodes
  $portmapper_port = '5369'

  # define macro for incoming services
  file { '/etc/shorewall/macro.leap_couchdb':
    content => "PARAM   -       -       tcp    $couchdb_port $portmapper_port",
    notify  => Service['shorewall'],
    require => Package['shorewall']
  }


  shorewall::rule {
      'net2fw-couchdb':
        source      => 'net',
        destination => '$FW',
        action      => 'leap_couchdb(ACCEPT)',
        order       => 200;
  }

  shorewall::rule {
    'dnat-bigcouch-clustering-to-stunnel':
      destination     => "net:${::ipaddress}:8080",
      destinationport => $portmapper_port,
      source          => '$FW',
      proto           => 'tcp',
      order           => 200,
      action          => 'DNAT';
  }


}