Add firewall rules for mosh

site-cookbooks/kosmos-base/metadata.rb

@@ -4,7 +4,7 @@ maintainer_email 'mail@kosmos.org'
 license          'All rights reserved'
 description      'The Kosmos base cookbook'
 long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
-version          '0.1.0'
+version          '0.1.1'
 
 depends 'unattended-upgrades'
 depends 'users'

site-cookbooks/kosmos-base/recipes/default.rb

@@ -18,6 +18,8 @@ include_recipe 'unattended-upgrades'
 package 'ruby2.1'
 package 'ruby2.1-dev'
 
+package 'mosh'
+
 include_recipe 'users::sysadmins'
 
 node.override['authorization']['sudo']['passwordless'] = true

site-cookbooks/kosmos-base/recipes/firewall.rb

@@ -17,3 +17,9 @@ firewall_rule 'ssh' do
   protocol :tcp
   action   :allow
 end
+
+firewall_rule 'mosh' do
+  port     60000..61000
+  protocol :udp
+  action   :allow
+end