chef/site-cookbooks/kosmos-dirsrv/recipes/firewall.rb

#
# Cookbook Name:: kosmos-dirsrv
# Recipe:: firewall
#

include_recipe "kosmos-base::firewall"

firewall_rule "ldap" do
  port     [389]
  source   "10.1.1.0/24" # zerotier
  protocol :tcp
  command  :allow
end