Open fw to test source

manifests/lb.pp

@@ -1,4 +1,15 @@
 class matrix::lb (
 ) {
-$ips = lookup('sourceips', undef, undef, undef)
+  $ips = lookup('sourceips', undef, undef, undef)
+  $ips.each | String $ip | {
+    if $::facts['sunet_nftables_enabled'] == 'yes' {
+      sunet::nftables::allow { "nft_testip${ip}":
+      port   =>   8443,
+      from   =>   $ip,
+      }
+    }
+    notify { 'test':
+      message => "Test test test ${ip}",
+    }
+  }
 }