include_recipe 'firewall'

firewall_rule 'garage_s3_api' do
  command  :allow
  protocol :tcp
  source   "10.1.1.0/24"
  port     node['garage']['s3_api_port']
end

firewall_rule 'garage_rpc' do
  command  :allow
  protocol :tcp
  source   "10.1.1.0/24"
  port     node['garage']['rpc_port']
end

firewall_rule 'garage_s3_web' do
  command  :allow
  protocol :tcp
  source   "10.1.1.0/24"
  port     node['garage']['s3_web_port']
end

firewall_rule 'garage_admin' do
  command  :allow
  protocol :tcp
  source   "10.1.1.0/24"
  port     node['garage']['admin_port']
end

firewall_rule 'garage_k2v_api' do
  command  :allow
  protocol :tcp
  source   "10.1.1.0/24"
  port     node['garage']['k2v_api_port']
end