Add requirement on firewall rules in freeipa

ComputeCanada · Dec 13, 2024 · 5dda12e · 5dda12e
1 parent 90ab5eb
commit 5dda12e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/site/profile/manifests/freeipa.pp b/site/profile/manifests/freeipa.pp
@@ -200,6 +200,7 @@
   include nftables::rules::dns
   include nftables::rules::https
   include nftables::rules::ldap
+  include nftables::rules::ssdp
 
   file { 'kinit_wrapper':
     path   => '/usr/bin/kinit_wrapper',
@@ -272,6 +273,10 @@
     require => [
       Package['ipa-server-dns'],
       File['/etc/hosts'],
+      Class['nftables::rules::dns'],
+      Class['nftables::rules::https'],
+      Class['nftables::rules::ldap'],
+      Class['nftables::rules::ssdp'],
     ],
     notify  => [
       Service['systemd-logind'],