bundles/powerdns: add iptables config

2021-03-21 11:12:18 +01:00 · 2021-03-21 11:12:18 +01:00 · 850d860d59
parent 31ddea7649
commit 850d860d59
1 changed files with 14 additions and 0 deletions
--- a/bundles/powerdns/metadata.py
+++ b/bundles/powerdns/metadata.py
@ -165,3 +165,17 @@ def hosts_entries_for_all_dns_servers(metadata):
            'entries': entries,
        },
    }
+
+
+@metadata_reactor.provides(
+    'iptables/port_rules',
+)
+def iptables(metadata):
+    return {
+        'iptables': {
+            'port_rules': {
+                '53': atomic(metadata.get('powerdns/restrict-to', set('*'))),
+                '53/udp': atomic(metadata.get('powerdns/restrict-to', set('*'))),
+            },
+        },
+    }