Puppet Class: nftables::rules::out::chrony

Defined in:
manifests/rules/out/chrony.pp

Summary

manage out chrony

Overview

Parameters:

  • servers (Array[Stdlib::IP::Address]) (defaults to: []) —

    single IP-Address or array of IP-addresses from NTP servers



3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
 
# File 'manifests/rules/out/chrony.pp', line 3

class nftables::rules::out::chrony (
  Array[Stdlib::IP::Address] $servers = [],
) {
  if empty($servers) {
    nftables::rule {
      'default_out-chrony':
        content => 'udp dport 123 accept',
    }
  } else {
    $ipv6_servers = $servers.filter |$ip| { $ip =~ Stdlib::IP::Address::V6 }
    $ipv4_servers = $servers.filter |$ip| { $ip =~ Stdlib::IP::Address::V4 }
    unless empty($ipv6_servers) {
      nftables::rule { 'default_out-chrony_v6':
        content => "ip6 daddr {${join($ipv6_servers, ',')}} udp dport 123 accept",
      }
    }
    unless empty($ipv4_servers) {
      nftables::rule { 'default_out-chrony_v4':
        content => "ip daddr {${join($ipv4_servers, ',')}} udp dport 123 accept",
      }
    }
  }
}