initial commit

1 files changed, 20 insertions, 0 deletions

diff --git a/manifests/chain.pp b/manifests/chain.pp
new file mode 100644
index 0000000..6f2ee1d
--- /dev/null
+++ b/manifests/chain.pp
@@ -0,0 +1,20 @@
+# defined resource which creates all rules for one chain
+# @param policy [Ferm::Policies] Set the default policy for a CHAIN
+# @param chain [Ferm::Chains] name of the chain that should be managed
+define ferm::chain (
+  Ferm::Policies $policy,
+  Ferm::Chains $chain = $name,
+) {
+
+  # concat resource for the chain
+  $filename = downcase($chain)
+  concat{"/etc/ferm.d/chains/${chain}.conf":
+    ensure  => 'present',
+  }
+
+  concat::fragment{"${chain}-policy":
+    target  => "/etc/ferm.d/chains/${chain}.conf",
+    content => epp("${module_name}/ferm_chain_header.conf.epp", {'policy' => $policy }),
+    order   => '01',
+  }
+}