From d89138e2a798c5d9f4ca81f4618483dd41d71ab6 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Date: Tue, 2 May 2023 20:02:21 +0200
Subject: [PATCH] Import moni firewall configuration

Some ports not yet covered by a role.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
---
 pillar/id/moni_lysergic_dev.sls | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/pillar/id/moni_lysergic_dev.sls b/pillar/id/moni_lysergic_dev.sls
index 60c3e5c..17f01e2 100644
--- a/pillar/id/moni_lysergic_dev.sls
+++ b/pillar/id/moni_lysergic_dev.sls
@@ -110,3 +110,14 @@ prometheus:
               send_resolved: yes
 
 manage_firewall: True
+firewalld:
+  zones:
+    internal:
+      services:
+        - https
+      ports:
+        - comment: DNS Slave
+          port: 5353
+          protocol: tcp
+        - port: 5353
+          protocol: udp