added automatic firewall confguration for the given

Modulefile

@@ -8,3 +8,4 @@ project_page 'https://github.com/maxchk/puppet-varnish'
 dependency 'puppetlabs/stdlib'
 dependency 'puppetlabs/concat'
 dependency 'puppetlabs/apt'
+dependency 'puppetlabs/firewall'

manifests/firewall.pp

@@ -0,0 +1,17 @@
+# Class varnish::firewall
+#
+# Uses puppetlabs/firewall module to open port 80
+#
+class varnish::firewall (
+	$manage_firewall     = true,
+	$varnish_listen_port = '6081',
+) {
+
+	firewall { '100 allow port 80 to varnish':
+		chain  => 'INPUT',
+		proto  => 'tcp',
+		state  => ['NEW'],
+		dport  => $varnish_listen_port,
+		action => 'accept',
+	}
+}

manifests/init.pp

@@ -64,14 +64,21 @@
   $shmlog_tempfs                = true,
   $version                      = present,
   $add_repo                     = true,
+  $manage_firewall              = true,
 ) {
 
   # read parameters
   include varnish::params
 
   # install Varnish
   class {'varnish::install':
-    add_repo => $add_repo
+    add_repo            => $add_repo
+    manage_firewall     => $manage_firewall
+    varnish_listen_port => $varnish_listen_port
+  }
+
+  # add firewall rule for port 80
+  class {'varnish::firewall':
   }
 
   # enable Varnish service

manifests/install.pp

@@ -18,13 +18,20 @@
 #
 
 class varnish::install (
-  $add_repo = true
+  $add_repo = true,
+  $manage_firewall = true,
+  $varnish_listen_port
 ) {
   class { 'varnish::repo':
     enable => $add_repo,
     before => Package['varnish'],
   }
 
+  class { 'varnish::firewall':
+	  enable              => $manage_firewall,
+	  varnish_listen_port => $varnish_listen_port,
+  }
+
   # varnish package
   package { 'varnish':
     ensure  => $varnish::version,