From a8908f9c48a60505572da211dfa13a7d35dd7cc9 Mon Sep 17 00:00:00 2001 From: Tomas Barton Date: Sat, 14 Sep 2024 17:20:23 +0200 Subject: [PATCH] Code formatting --- README.md | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 8c7ae1f1..189e64cd 100644 --- a/README.md +++ b/README.md @@ -11,20 +11,26 @@ By default it sets up a firewall that drops every connection, except outbound ICMP, DNS, NTP, HTTP, and HTTPS, and inbound ICMP and SSH traffic: - include nftables +```puppet +include nftables +``` This can be overridden using parameters, for example, this allows all outbound traffic: - class { 'nftables': - out_all => true, - } +```puppet +class { 'nftables': + out_all => true, +} +``` There are also pre-built rules for specific services, for example this will allow a web server to serve traffic over HTTPS: - include nftables - include nftables::rules::https +```puppet +include nftables +include nftables::rules::https +``` Note that the module conflicts with the `firewalld` system and will stop it in Puppet runs.