From 45b53f83926cbae98a5709458eab2fc700a4bab1 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter
Date: Sun, 29 Jan 2023 15:50:11 +0100
Subject: salt.master: add firewalld rules

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
---
 pillar/role/salt/master.sls | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'pillar/role/salt')

diff --git a/pillar/role/salt/master.sls b/pillar/role/salt/master.sls
index ee83887..59f4908 100644
--- a/pillar/role/salt/master.sls
+++ b/pillar/role/salt/master.sls
@@ -79,3 +79,13 @@ salt:
     auth.ldap.binddn: ${'secret_salt:master:auth.ldap.binddn'}
     auth.ldap.bindpw: ${'secret_salt:master:auth.ldap.bindpw'}
     auth.ldap.filter: ${'secret_salt:master:auth.ldap.filter'}
+
+firewalld:
+  zones:
+    internal:
+      services:
+        - salt-master
+      ports:
+        - comment: salt-api
+          port: 4550
+          protocol: tcp
-- 
cgit v1.2.3