eid-ops/global/overlay/etc/puppet/modules/eid/manifests/relay.pp

class eid::relay() {
  package {'sasl2-bin': ensure => latest}
  package {'libsasl2-modules': ensure => latest}
  package {'opendkim': ensure => latest}


  $submission_ip = hiera_array('submission_ip',[]);
  
  sunet::misc::ufw_allow { "allow-submission-clients":
     from   => $submission_ip,
     port => '587',
  }

  sunet::misc::ufw_allow { "allow-dhcp6-546":
      from  => 'any',
      to    => 'fe80::/64',
      port  => '546',
      proto => 'udp',
  }
}