bundles/nftables: store rules in dedicated files instead of nftables.conf

2021-12-14 14:03:13 +01:00 · 2021-12-14 14:03:13 +01:00 · 0101e0c92d
commit 0101e0c92d
parent 1742f51778
11 changed files with 77 additions and 102 deletions
--- a/bundles/wide-dhcp6c/metadata.py
+++ b/bundles/wide-dhcp6c/metadata.py
@ -6,12 +6,10 @@ defaults = {
    },
    'nftables': {
        'rules': {
-            'input': {
-                'wide-dhcp6c': [
-                    'udp dport { 546, 547 } ip6 saddr ff00::/12 accept',
-                    'udp dport { 546, 547 } ip6 saddr fe80::/10 accept',
-                ],
-            },
+            '10-wide-dhcp6c': [
+                'inet filter input udp dport { 546, 547 } ip6 saddr ff00::/12 accept',
+                'inet filter input udp dport { 546, 547 } ip6 saddr fe80::/10 accept',
+            ],
        },
    },
    'icinga2_api': {