Add consul firewall rule

ComputeCanada · Dec 13, 2024 · cf93a14 · cf93a14
1 parent 5dda12e
commit cf93a14
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/site/profile/manifests/consul.pp b/site/profile/manifests/consul.pp
@@ -14,6 +14,10 @@
     $retry_join = $servers
   }
 
+  nftables::rule { 'default_in-consul':
+    content => 'tcp dport 8500 accept comment "Accept consul"',
+  }
+
   class { 'consul':
     config_mode   => '0640',
     acl_api_token => lookup('profile::consul::acl_api_token'),