From 7e29a7f2e38fd763a1e2df59d56d3ab0f6bb9280 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Date: Apr 14 2024 15:23:46 +0000
Subject: Purge unmanaged firewalld zones


Ensure only the zones managed by Salt are active on machines.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

---

diff --git a/pillar/common/firewall.sls b/pillar/common/firewall.sls
index 3671ee9..f78e0a3 100644
--- a/pillar/common/firewall.sls
+++ b/pillar/common/firewall.sls
@@ -1,6 +1,7 @@
 firewalld:
   enabled: false
   FlushAllOnReload: 'yes'
+  purge_zones: true
   services:
     node_exporter:
       description: Prometheus Node Exporter