From b685f16c914b9fa05bda7c69ce9e157d04262d09 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter
Date: Sun, 30 Apr 2023 16:07:21 +0200
Subject: Add manage_firewall conditional

Allow us to enroll machines in Salt which do not yet have their firewall
configuration imported without having their rules overwritten.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
---
 pillar/cluster/denc/web-proxy.sls | 1 +
 1 file changed, 1 insertion(+)

(limited to 'pillar/cluster')

diff --git a/pillar/cluster/denc/web-proxy.sls b/pillar/cluster/denc/web-proxy.sls
index 61fd653..0bdeec7 100644
--- a/pillar/cluster/denc/web-proxy.sls
+++ b/pillar/cluster/denc/web-proxy.sls
@@ -212,6 +212,7 @@ nginx:
             - error_log: /var/log/nginx/libsso_public.error.log
             - access_log: /var/log/nginx/libsso_public.access.log combined
 
+manage_firewall: True
 firewalld:
   zones:
     public:
-- 
cgit v1.2.3