diff --git a/Puppetfile b/Puppetfile index 41f6eab..766f4b2 100644 --- a/Puppetfile +++ b/Puppetfile @@ -34,7 +34,7 @@ mod 'puppetlabs-bolt_shim', '0.1.1' mod 'puppetlabs-reboot', '2.0.0' mod 'puppet-iis', '2.0.2' -mod 'puppet-windows_firewall', '1.0.3' +mod 'puppet-windows_firewall', '2.0.1' mod 'puppet-windowsfeature', '2.0.0' mod 'puppet-hiera', '2.1.2' mod 'puppet-archive', '3.2.0' diff --git a/site/profile/manifests/sample_website/windows.pp b/site/profile/manifests/sample_website/windows.pp index bd59c3c..2d86b6e 100644 --- a/site/profile/manifests/sample_website/windows.pp +++ b/site/profile/manifests/sample_website/windows.pp @@ -27,8 +27,8 @@ class profile::sample_website::windows ( windows_firewall::exception { 'IIS': ensure => present, direction => 'in', - action => 'Allow', - enabled => 'yes', + action => 'allow', + enabled => true, protocol => 'TCP', local_port => $webserver_port, display_name => 'HTTP Inbound', diff --git a/site/profile/manifests/windows_baseline.pp b/site/profile/manifests/windows_baseline.pp index df40ddb..be7bbdb 100644 --- a/site/profile/manifests/windows_baseline.pp +++ b/site/profile/manifests/windows_baseline.pp @@ -16,10 +16,10 @@ class profile::windows_baseline { windows_firewall::exception { 'TSErule': ensure => present, direction => 'in', - action => 'Allow', - enabled => 'yes', + action => 'allow', + enabled => true, protocol => 'TCP', - local_port => '8080', + local_port => 8080, display_name => 'TSE PUPPET DEMO', description => 'Inbound rule example for demo purposes', } diff --git a/site/role/manifests/windows_base_hipaa.pp b/site/role/manifests/windows_base_hipaa.pp new file mode 100644 index 0000000..9400139 --- /dev/null +++ b/site/role/manifests/windows_base_hipaa.pp @@ -0,0 +1,4 @@ +# @summary This role installs a baseline of packages on Windows machines according to HIPAA guidelines +class role::windows_base_hipaa { + include profile::baseline_hipaa +}