From 5af3fbe3e06de7ac32f5efdff89699bb8f674b81 Mon Sep 17 00:00:00 2001
From: Franziska Kunsmann <hi@kunsmann.eu>
Date: Sat, 15 Feb 2025 10:33:25 +0100
Subject: [PATCH] bundles/redis: support 'restrict-to'

---
 bundles/redis/metadata.py | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/bundles/redis/metadata.py b/bundles/redis/metadata.py
index cf15c20..dc0f23b 100644
--- a/bundles/redis/metadata.py
+++ b/bundles/redis/metadata.py
@@ -1,3 +1,5 @@
+from bundlewrap.metadata import atomic
+
 defaults = {
     'apt': {
         'packages': {
@@ -48,3 +50,16 @@ if node.has_bundle('telegraf'):
             },
         },
     }
+
+
+@metadata_reactor.provides(
+    'firewall/port_rules',
+)
+def firewall(metadata):
+    return {
+        'firewall': {
+            'port_rules': {
+                '6379/tcp': atomic(metadata.get('redis/restrict-to', {'*'})),
+            },
+        },
+    }