Add a firewall rule to the kosmos_openresty cookbook

It is part of the run list in production

roles/openresty.rb

@@ -7,6 +7,7 @@ development_run_list = %w(
 
 default_run_list = %w(
   kosmos_openresty::default
+  kosmos_openresty::firewall
 )
 
 env_run_lists(

site-cookbooks/kosmos_openresty/metadata.rb

@@ -6,4 +6,5 @@ description 'Installs/Configures openresty'
 version '0.1.0'
 chef_version '>= 18.0'
 
+depends 'kosmos-base'
 depends 'openresty'

site-cookbooks/kosmos_openresty/recipes/firewall.rb

@@ -0,0 +1,11 @@
+#
+# Cookbook Name:: kosmos_openresty
+# Recipe:: firewall
+
+include_recipe "kosmos-base::firewall"
+
+firewall_rule "http/https" do
+  port     [80, 443]
+  protocol :tcp
+  command  :allow
+end