anvil/tools/firewall.txt

<!-- NOTE: These are used by 'anvil-manage-firewall', which is in turn called each minute by 'anvil-daemon'. -->
<!--       Changes to these templates should propagate within a minute or so.                                -->

<!-- start bcn_zone -->
<?xml version="1.0" encoding="utf-8"?>
<zone>
  <short>#!variable!zone!#</short>
  <description>#!variable!description!#</description>
  <service name="cockpit"/>
  <service name="http"/>
  <service name="https"/>
  <service name="postgresql"/>
  <service name="ssh"/>
  <service name="tftp"/>
  <service name="high-availability"/>
</zone>
<!-- end bcn_zone -->

<!-- start ifn_zone -->
<?xml version="1.0" encoding="utf-8"?>
<zone>
  <short>#!variable!zone!#</short>
  <description>#!variable!description!#</description>
  <service name="cockpit"/>
  <service name="http"/>
  <service name="https"/>
  <service name="postgresql"/>
  <service name="ssh"/>
</zone>
<!-- end ifn_zone -->

<!-- start sn_zone -->
<?xml version="1.0" encoding="utf-8"?>
<zone>
  <short>#!variable!zone!#</short>
  <description>#!variable!description!#</description>
  <service name="ssh"/>
</zone>
<!-- end sn_zone -->