include_recipe 'firewall' firewall_rule 'garage_rpc' do command :allow protocol :tcp source "10.1.1.0/24" port node['garage']['rpc_port'] end