Add firewall rule for Discourse

site-cookbooks/kosmos_discourse/metadata.rb

@@ -8,3 +8,4 @@ version '0.1.0'
 chef_version '>= 14.0'
 
 depends "kosmos-nginx"
+depends 'firewall'

site-cookbooks/kosmos_discourse/recipes/default.rb

@@ -32,3 +32,12 @@ systemd_unit "discourse.service" do
            }})
   action [:create, :enable]
 end
+
+include_recipe 'firewall'
+
+firewall_rule 'discourse' do
+  port     [3001]
+  source   "10.1.1.0/24"
+  protocol :tcp
+  command  :allow
+end