Skip to content

Commit

Permalink
Merge pull request #257 from deric/readme
Browse files Browse the repository at this point in the history
Code formatting
  • Loading branch information
smortex authored Sep 14, 2024
2 parents 78f0eee + a8908f9 commit dede273
Showing 1 changed file with 12 additions and 6 deletions.
18 changes: 12 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,20 +11,26 @@ By default it sets up a firewall that drops every connection, except
outbound ICMP, DNS, NTP, HTTP, and HTTPS, and inbound ICMP and SSH
traffic:

include nftables
```puppet
include nftables
```

This can be overridden using parameters, for example, this allows all
outbound traffic:

class { 'nftables':
out_all => true,
}
```puppet
class { 'nftables':
out_all => true,
}
```

There are also pre-built rules for specific services, for example this
will allow a web server to serve traffic over HTTPS:

include nftables
include nftables::rules::https
```puppet
include nftables
include nftables::rules::https
```

Note that the module conflicts with the `firewalld` system and will
stop it in Puppet runs.
Expand Down

0 comments on commit dede273

Please sign in to comment.