Summary

Certname Version Transaction UUID Code ID
rpi5-b1 1aff74f01d06ece92bf6eb393c43752b4c2ed310 0f0f2d19-f22d-4e1f-881d-c12f8377b829 None

Resources

Resource Location
Filebucket[main] /etc/puppetlabs/code/environments/production/manifests/site.pp:14
Systemd::Journald::Dropin_file[override.conf] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/journald/manage_dropin.pp:26
File[/etc/systemd/journald.conf.d/override.conf] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/journald/dropin_file.pp:50
Class[Profile::Rsyslog] None:None
Class[Profile::Vim] None:None
File[/etc/systemd/journald.conf.d] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/journald/dropin_file.pp:38
Systemd::Journald::Manage_dropin[override.conf] /etc/puppetlabs/code/environments/production/site/profile/manifests/systemd.pp:26
Class[Apt] /etc/puppetlabs/code/environments/production/site/profile/manifests/apt.pp:12
Apt::Setting[sources-debian-security] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:369
Class[Profile::Apt] None:None
Apt::Source[debian] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:429
File[/etc/apt/sources.list.d/debian.sources] /etc/puppetlabs/code/environments/production/modules/apt/manifests/setting.pp:69
Apt::Setting[sources-debian] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:369
Exec[systemd-nftables.service-systemctl-daemon-reload] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/daemon_reload.pp:49
Exec[systemd-collect-packages-facts.timer-systemctl-daemon-reload] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/daemon_reload.pp:49
Exec[systemd-collect-packages-facts.service-systemctl-daemon-reload] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/daemon_reload.pp:49
Exec[nftables_generate_hash] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:267
Cron[gitlab-backup data] /etc/puppetlabs/code/environments/production/site/profile/manifests/gitlab.pp:40
Package[locales-all] /etc/puppetlabs/code/environments/production/modules/locales/manifests/init.pp:128
Exec[locale-gen] /etc/puppetlabs/code/environments/production/modules/locales/manifests/init.pp:167
Package[locales] /etc/puppetlabs/code/environments/production/modules/locales/manifests/init.pp:134
File[/etc/locale.conf] /etc/puppetlabs/code/environments/production/modules/locales/manifests/init.pp:190
Class[Locales::Params] None:None
File[/etc/default/locale] /etc/puppetlabs/code/environments/production/modules/locales/manifests/init.pp:207
Class[Profile::Locales] None:None
Exec[update-locale] /etc/puppetlabs/code/environments/production/modules/locales/manifests/init.pp:215
File[/etc/locale.gen] /etc/puppetlabs/code/environments/production/modules/locales/manifests/init.pp:149
Class[Locales] /etc/puppetlabs/code/environments/production/site/profile/manifests/locales.pp:6
Anchor[systemd::reexec_before_reload] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/init.pp:553
Systemd::Unit_file[collect-packages-facts.service] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/manage_unit.pp:223
Service[systemd-journald] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/journald.pp:8
Systemd::Unit_file[collect-packages-facts.timer] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/manage_unit.pp:223
Ini_setting[Storage] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/journald.pp:13
Class[Profile::Systemd] None:None
Ini_setting[SystemMaxUse] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/journald.pp:13
Exec[systemctl set-default multi-user.target] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/init.pp:439
File[/etc/localtime] /etc/puppetlabs/code/environments/production/modules/timezone/manifests/init.pp:99
File[/root/.bashrc.d/bashrc_root_prompt] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:45
Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat[nftables-inet-filter-chain-INPUT] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Sysctl[vm.swappiness] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/base.pp:24
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[INPUT-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:36
Class[Gitlab::Backup] None:None
Concat_file[nftables-ip-nat-chain-INPUT] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat::Fragment[nftables-inet-filter-chain-global-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-inet-filter-chain-global-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
File[/etc/dphys-swapfile] /etc/puppetlabs/code/environments/production/site/profile/manifests/dphys_swap.pp:13
Exec[update_timezone] /etc/puppetlabs/code/environments/production/modules/timezone/manifests/init.pp:119
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Nftables::Rule[default_in-drop_incoming_to_udp_1900] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
Ini_setting[agent/ignorecache] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Apt::Setting[list-gitlab_official_ee] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:369
Concat::Fragment[nftables-inet-filter-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:62
Concat::Fragment[global config] /etc/puppetlabs/code/environments/production/modules/ssh/manifests/server/config.pp:44
Nftables::Rule[PREROUTING-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:27
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Kmod::Blacklist[pcspkr] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Nftables::Rule[DOCKER_ISOLATION_STAGE_1-counter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:37
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_global_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Ssh::Server::Install] None:None
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Kmod::Blacklist[l2tp_ip6] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
File[/var/cache/os_patching/pre_patching_command] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:251
File[/root/.vimrc] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:50
Apt::Keyring[docker.asc] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:209
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-http] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Nftables::Rule[INPUT-policy@ip-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:99
Nftables::Rule[PREROUTING6-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:27
Augeas[kmod::setting kmod::install algif_aead algif_aead] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Concat_fragment[nftables-inet-filter-chain-default_in-rule-https] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Stdlib] None:None
Stage[setup_infra] /etc/puppetlabs/code/environments/production/modules/stdlib/manifests/stages.pp:27
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_file[nftables-inet-filter-chain-FORWARD] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-https_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_file[nftables-inet-filter] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Nftables::Chain[DOCKER-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:81
Class[Puppet_agent::Install] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/init.pp:235
Concat::Fragment[nftables-ip-nat-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:62
Ssh_authorized_key[root_robert@keep_rsa] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:17
Nftables::Chain[global] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:17
Nftables::Chain[FORWARD] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:17
Ssh_authorized_key[robert_robert@um790] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:58
File[/root/.bash_profile] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:33
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
File[/etc/puppetlabs/facter] /etc/puppetlabs/code/environments/production/site/profile/manifests/packages.pp:14
File[/etc/modprobe.d/algif_aead.conf] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:29
Concat::Fragment[nftables-ip-nat-chain-DOCKER-rule-counter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-policy] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Kmod::Setting[kmod::blacklist l2tp_ip] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Class[Docker] /etc/puppetlabs/code/environments/production/site/profile/manifests/docker.pp:35
Apt::Source[docker] /etc/puppetlabs/code/environments/production/site/profile/manifests/docker.pp:20
Kmod::Setting[kmod::blacklist l2tp_ppp] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Class[Gitlab::Omnibus_package_repository] None:None
Concat_fragment[nftables-inet-filter-chain-default_out-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-DOCKER_USER-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Profile::Docker] None:None
Apt::Setting[sources-raspi] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:369
Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat[nftables-ip6-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:16
Concat_fragment[nftables-ip6-nat-body] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-default_out-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_file[nftables-ip6-nat] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat[nftables-inet-filter-chain-default_fwd] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Nftables::Rule[POSTROUTING-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:47
Kmod::Setting[kmod::blacklist 8192cu] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Service[ModemManager] /etc/puppetlabs/code/environments/production/site/profile/manifests/modemmanager.pp:13
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip-nat-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:34
Ini_setting[main/configtimeout] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Class[Profile::Pihole] None:None
File[/etc/nftables/puppet/inet-filter-chain-DOCKER_ISOLATION_STAGE_1.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-type] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Vim] /etc/puppetlabs/code/environments/production/site/profile/manifests/vim.pp:7
File[/etc/nftables/puppet/ip6-nat-chain-POSTROUTING6.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Nftables::Rule[FORWARD-accept_established_related] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter/fwd_conntrack.pp:3
Concat_fragment[nftables-ip-nat-chain-INPUT-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Chain[OUTPUT] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:17
File[/usr/local/bin/docker-run-pihole-stop.sh] /etc/puppetlabs/code/environments/production/modules/docker/manifests/run.pp:610
Class[Sudo] /etc/puppetlabs/code/environments/production/site/profile/manifests/sudo.pp:7
Nftables::Rule[INPUT-lo] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:36
Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-https] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Exec[sysctl-vm.swappiness] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:69
Service[gitlab-runsvdir.service] /etc/puppetlabs/code/environments/production/site/profile/manifests/gitlab.pp:27
Nftables::Chain[OUTPUT-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:89
File[/var/cache/os_patching/blackout_windows] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:300
Sshkey[rpi5-b1.rjstuart.id.au_ecdsa] /etc/puppetlabs/code/environments/production/modules/ssh/manifests/hostkeys.pp:78
Apt::Keyring[gitlab_ce.asc] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:209
Stage[deploy] /etc/puppetlabs/code/environments/production/modules/stdlib/manifests/stages.pp:31
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Ini_setting[main/app_management] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
File[/home/robert/.bashrc.d/bash_config] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/robert.pp:36
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-reject_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-inet-filter-chain-DOCKER-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/apt/keyrings/openvox-keyring.gpg] /etc/puppetlabs/code/environments/production/modules/apt/manifests/keyring.pp:65
Class[Kmod] /etc/puppetlabs/code/environments/production/site/profile/manifests/kmod.pp:12
Schedule[Patching as Code - High Priority Patch Window] /etc/puppetlabs/code/environments/production/modules/patching_as_code/functions/process_patch_groups.pp:49
File[/home/robert/.bashrc.d] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/robert.pp:23
Kmod::Setting[kmod::blacklist l2tp_ip6] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/var/cache/os_patching/patch_window] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:246
Nftables::Rule[POSTROUTING6-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:47
Concat_file[nftables-ip6-nat-chain-POSTROUTING6] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
File[/etc/nftables/puppet/ip-nat-chain-OUTPUT.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat::Fragment[nftables-inet-filter-chain-default_fwd-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Service[puppet] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/service.pp:30
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Patching_as_code] /etc/puppetlabs/code/environments/production/site/profile/manifests/patching.pp:10
Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-wireguard_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Class[Gitlab::Service] None:None
Concat_fragment[nftables-ip-nat-chain-INPUT-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Profile::Base::Sysctl] None:None
Concat_fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/nftables/puppet/inet-filter-chain-DOCKER.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/apt/keyrings/gitlab_ce.asc] /etc/puppetlabs/code/environments/production/modules/apt/manifests/keyring.pp:65
Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-policy] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Ini_setting[/configtimeout] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Nftables::Config[ip6-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:3
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-reject_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Class[Profile::Users::Root] None:None
Kmod::Blacklist[l2tp_netlink] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Docker::Config] None:None
Augeas[kmod::setting kmod::blacklist pcspkr pcspkr] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
File[preferences.d] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:381
Systemd::Timer_wrapper[collect-packages-facts] /etc/puppetlabs/code/environments/production/site/profile/manifests/packages.pp:32
Kmod::Blacklist[tipc_diag] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Exec[enforce-sysctl-value-net.ipv4.ip_forward] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:92
Concat[nftables-inet-filter-chain-default_in] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Stage[patch_reboot] /etc/puppetlabs/code/environments/production/modules/patching_as_code/manifests/init.pp:136
Nftables::Rule[default_in-wireguard] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/wireguard.pp:6
Class[Sysctl::Params] None:None
Class[Puppet_agent::Params] None:None
Package[rootfiles] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:13
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Dnsclient] /etc/puppetlabs/code/environments/production/site/profile/manifests/base/dns.pp:10
Nftables::Chain[default_fwd] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:26
Concat_fragment[nftables-inet-filter-chain-FORWARD-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Stage[pre] /etc/puppetlabs/code/environments/production/manifests/site.pp:7
Concat_fragment[nftables-ip-nat-chain-PREROUTING-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/apt/sources.list.d/gitlab_official_ee.list] /etc/puppetlabs/code/environments/production/modules/apt/manifests/setting.pp:69
Concat::Fragment[nftables-ip-nat-body] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:54
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-ip6-nat-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-OUTPUT-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Profile::Packages] None:None
File[/etc/nftables/puppet/inet-filter-chain-DOCKER_USER.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-type_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-policy] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-ip-nat-chain-DOCKER-rule-counter_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-type_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_in-rule-http] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Package[apt-listchanges] /etc/puppetlabs/code/environments/production/site/profile/manifests/apt.pp:31
Service[docker] /etc/puppetlabs/code/environments/production/modules/docker/manifests/service.pp:514
Nftables::Rule[default_fwd-jump_docker_isolation_stage_1] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:55
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-body] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Service[dphys-swapfile] /etc/puppetlabs/code/environments/production/site/profile/manifests/dphys_swap.pp:24
Concat_fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[global config] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Nftables::Rule[INPUT-jump_global] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:36
Service[collect-packages-facts.timer] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/timer_wrapper.pp:103
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Nftables::Rule[OUTPUT-reject] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:91
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_udp] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-ip-nat-chain-OUTPUT-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-type_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/nftables/puppet/ip6-nat.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:23
Apt::Source[gitlab_official_ce] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/omnibus_package_repository.pp:60
Ini_setting[/pluginsync] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat_fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Ini_setting[main/trusted_server_facts] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_file[nftables-ip-nat-chain-POSTROUTING] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat_fragment[nftables-inet-filter-chain-default_in-rule-https_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Kmod::Setting[kmod::blacklist tipc_diag] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-lo] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[default_in-dhcpv6_client] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/dhcpv6_client.pp:3
Concat_fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Exec[sudo-syntax-check for file /etc/sudoers.d/10_robert_to_root] /etc/puppetlabs/code/environments/production/modules/sudo/manifests/conf.pp:137
File[/etc/nftables/puppet/inet-filter-chain-OUTPUT.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Puppet_agent_end_run[present] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/install.pp:112
Class[Profile::Users::Robert] None:None
File[/etc/gitlab] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/host_config.pp:19
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Ini_setting[/ignorecache] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Ini_setting[main/ignorecache] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat_fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Profile::Base] None:None
Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-type] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Apt::Source[openvox8-release] /etc/puppetlabs/code/environments/production/site/profile/manifests/puppet_agent.pp:34
File[/etc/puppetlabs/facter/facts.d] /etc/puppetlabs/code/environments/production/site/profile/manifests/packages.pp:14
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Timezone] /etc/puppetlabs/code/environments/production/site/profile/manifests/base/timezone.pp:9
File[/etc/apt/sources.list.d/docker.list] /etc/puppetlabs/code/environments/production/modules/apt/manifests/setting.pp:69
Class[Ssh::Server::Service] None:None
Nftables::Chain[POSTROUTING] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:10
File[/etc/nftables/puppet/inet-filter-chain-default_out.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Ini_setting[/app_management] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Nftables::Rule[default_out-dhcpc] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/out/dhcp.pp:3
Nftables::Chain[PREROUTING] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:10
Class[Nftables::Rules::Out::Dhcp] None:None
Nftables::Config[inet-filter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:11
Exec[update-sysctl.conf-vm.swappiness] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:77
Nftables::Rule[default_in-drop_broadcast_to_udp_6667] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
Class[Nftables::Inet_filter::In_out_conntrack] None:None
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-policy] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat[nftables-inet-filter-chain-global] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Class[Profile::Gitlab] None:None
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_in-rule-wireguard] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Package[unattended-upgrades] /etc/puppetlabs/code/environments/production/site/profile/manifests/apt.pp:26
Class[Nftables::Rules::Icmp] None:None
Stage[setup] /etc/puppetlabs/code/environments/production/modules/stdlib/manifests/stages.pp:25
Class[Gitlab::Install] None:None
Concat_file[nftables-inet-filter-chain-default_in] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Kmod::Install[algif_aead] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:61
Class[Sudo::Package] /etc/puppetlabs/code/environments/production/modules/sudo/manifests/init.pp:178
Nftables::Rule[INPUT-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:36
Concat_fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-body] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:42
Concat_fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/var/lib/pihole] /etc/puppetlabs/code/environments/production/site/profile/manifests/pihole.pp:16
File[/etc/systemd/system/collect-packages-facts.timer] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/unit_file.pp:109
Concat[nftables-ip-nat-chain-POSTROUTING] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-default_in-rule-dns_udp] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Nftables::Rule[DOCKER_ISOLATION_STAGE_1-iifname] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:37
Kmod::Blacklist[floppy] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-ip-nat-chain-DOCKER-rule-counter_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/gitlab/skip-auto-reconfigure] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/host_config.pp:50
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
User[robert] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:31
Concat[nftables-ip6-nat-chain-POSTROUTING6] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Nftables::Rule[default_in-mdns_v6] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/mdns.pp:27
Class[Stdlib::Stages] None:None
Sudo::Conf[robert_to_root] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:46
Class[Systemd::Timedatectl] None:None
User[root] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:7
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Stage[main] None:None
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-lo_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip-nat-chain-INPUT-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Exec[apt_update] /etc/puppetlabs/code/environments/production/modules/apt/manifests/update.pp:89
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Package[docker] /etc/puppetlabs/code/environments/production/modules/docker/manifests/install.pp:79
Ini_setting[agent/configtimeout] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Node[default] None:None
Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-type] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Class[Nftables::Rules::Out::Dhcpv6_client] None:None
Concat_fragment[nftables-inet-filter-chain-default_in-rule-ssh_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/nftables/puppet/inet-filter-chain-DOCKER_ISOLATION_STAGE_2.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat_fragment[nftables-ip-nat-chain-POSTROUTING-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Nftables::Rules::Wireguard] None:None
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Chain[DOCKER_ISOLATION_STAGE_1] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:29
Class[Puppet_agent::Prepare] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/init.pp:232
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip-nat-chain-DOCKER-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Ini_setting[puppet-agent-splay] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/configure.pp:12
Apt::Source[raspi] /etc/puppetlabs/code/environments/production/site/profile/manifests/rpi.pp:9
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
File[patching_configuration.json] /etc/puppetlabs/code/environments/production/modules/patching_as_code/manifests/init.pp:227
Nftables::Rule[default_in-http] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/http.pp:3
Class[Nftables::Bridges] None:None
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
File[/etc/gitlab/gitlab.rb] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/omnibus_config.pp:122
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Exec[docker-systemd-reload-before-service] /etc/puppetlabs/code/environments/production/modules/docker/manifests/service.pp:363
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Class[Stdlib::Manage] None:None
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
File[keyrings] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:411
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Cron[Cache patching data at reboot] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:381
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-lo] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Profile::Sudo] None:None
Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-type] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-DOCKER_USER-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[FORWARD-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:102
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Nftables::Chain[DOCKER_ISOLATION_STAGE_2] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:29
Package[debsecan] /etc/puppetlabs/code/environments/production/site/profile/manifests/apt.pp:31
File[/etc/puppetlabs/puppet/patching_unsafe_processes] /etc/puppetlabs/code/environments/production/modules/patching_as_code/manifests/init.pp:160
Nftables::Rule[default_in-mdns_v4] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/mdns.pp:22
File[/opt/gitlab-shell] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/host_config.pp:66
Systemd::Manage_unit[collect-packages-facts.service] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/timer_wrapper.pp:83
Concat_file[nftables-inet-filter-chain-DOCKER] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat[nftables-ip-nat-chain-PREROUTING] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
File[/usr/local/bin/docker-run-pihole-start.sh] /etc/puppetlabs/code/environments/production/modules/docker/manifests/run.pp:600
Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-type_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Cron[Cache patching data] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:369
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Nftables::Rule[default_fwd-idocker_onot_accept] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:55
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Profile::Puppet_agent] None:None
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Package[vim-nox] /etc/puppetlabs/code/environments/production/modules/vim/manifests/init.pp:132
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Nftables::Rule[default_in-allow_web_10k] /etc/puppetlabs/code/environments/production/site/profile/manifests/pihole.pp:51
Concat[nftables-inet-filter-chain-default_out] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
File[/etc/puppetlabs/puppet/puppet.conf] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:12
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Class[Puppet_agent::Configure] None:None
Class[Gitlab::Omnibus_config] None:None
Augeas[kmod::setting kmod::blacklist l2tp_ip l2tp_ip] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Concat::Fragment[nftables-ip-nat-chain-DOCKER-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_file[nftables-inet-filter-chain-OUTPUT] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcpc] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-FORWARD-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip-nat-chain-INPUT-rule-type] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[OUTPUT-accept_established_related] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter/in_out_conntrack.pp:3
File[/etc/sudoers] /etc/puppetlabs/code/environments/production/modules/sudo/manifests/init.pp:213
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-type] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Augeas[kmod::setting kmod::blacklist tipc_diag tipc_diag] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Nftables::Rule[FORWARD-reject] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:121
File[/etc/sysctl.d/net.ipv4.ip_forward.conf] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:55
File[/etc/modprobe.d/blacklist.conf] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:43
Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-type_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-reject] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Package[rsyslog] /etc/puppetlabs/code/environments/production/site/profile/manifests/rsyslog.pp:4
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
File[/root/.bashrc] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:37
Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Nftables::Inet_filter::Fwd_conntrack] None:None
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Profile::Dphys_swap] None:None
Class[main] None:None
Ini_setting[master/pluginsync] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
File[/home/robert/.bash_logout] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:75
Concat_fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-type_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-reject_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Group[robert] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:26
Class[Sudo::Params] None:None
Concat_fragment[nftables-inet-filter-chain-default_fwd-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat[nftables-inet-filter-chain-DOCKER_USER] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Concat::Fragment[nftables-inet-filter-chain-DOCKER-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
File[/etc/nftables/puppet/inet-filter-chain-INPUT.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-type_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:34
Class[Role::Gitlab_server] None:None
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-jump_global] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-INPUT-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/vim/vimrc] /etc/puppetlabs/code/environments/production/modules/vim/manifests/init.pp:136
Nftables::Rule[default_in-https] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/https.pp:3
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Kmod::Blacklist[l2tp_ip] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Concat_file[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Nftables::Rule[INPUT-log_discarded] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:51
File[/etc/nftables/puppet/inet-filter-chain-FORWARD.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Apt::Setting[conf-update-stamp] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:349
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-all_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[default_in-accept_icmp] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/icmp.pp:41
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Exec[sysctl-net.ipv4.ip_forward] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:69
Concat_fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-docker_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Augeas[kmod::setting kmod::blacklist l2tp_ip6 l2tp_ip6] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Nftables::Rule[POSTROUTING6-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:47
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Nftables::Chain[PREROUTING6] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:18
File[/etc/modprobe.d/modprobe.conf] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:43
Nftables::Rule[DOCKER-counter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:99
Nftables::Rule[default_fwd-out_docker_accept] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:55
Concat_fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/modprobe.d] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:36
Kmod::Blacklist[l2tp_ppp] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Systemd::Daemon_reload[collect-packages-facts.timer] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/unit_file.pp:122
Ini_setting[master/app_management] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Kmod::Setting[kmod::blacklist sctp_diag] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Concat::Fragment[nftables-inet-filter-chain-FORWARD-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Ini_setting[agent/app_management] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
File[/etc/systemd/system/docker.service.d] /etc/puppetlabs/code/environments/production/modules/docker/manifests/service.pp:335
Nftables::Rule[INPUT-jump_default_in] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:51
Class[Nftables::Ip_nat] None:None
File[/etc/sysctl.d] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/base.pp:33
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-type_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip-nat-chain-PREROUTING-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_file[nftables-inet-filter-chain-global] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat_fragment[nftables-inet-filter-chain-default_in-rule-wireguard_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Package[openvox-agent] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/install.pp:105
Concat_file[nftables-inet-filter-chain-default_out] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Nftables::Rule[default_out-dhcpv6_client] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/out/dhcpv6_client.pp:3
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-lo] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Service[docker-pihole] /etc/puppetlabs/code/environments/production/modules/docker/manifests/run.pp:689
Class[Docker::Service] None:None
File[/opt/puppetlabs] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare.pp:14
Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
File[/home/robert/.bashrc] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/robert.pp:32
Nftables::Rule[FORWARD-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:102
Nftables::Rule[FORWARD-jump_default_fwd] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:51
File[/etc/apt/sources.list.d/raspi.sources] /etc/puppetlabs/code/environments/production/modules/apt/manifests/setting.pp:69
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-lo] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Ini_setting[puppet-agent-environment] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/configure.pp:12
Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_out-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Class[Docker::Repos] None:None
Profile::User_type[robert] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/robert.pp:9
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-reject_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
File[apt.conf.d] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:391
Kmod::Blacklist[sctp_diag] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Concat::Fragment[nftables-ip6-nat-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:62
Nftables::Rule[POSTROUTING-docker] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:99
Apt::Keyring[openvox-keyring.gpg] /etc/puppetlabs/code/environments/production/site/profile/manifests/puppet_agent.pp:30
File[/home/gitlab-consul/.pgpass] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/host_config.pp:84
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-reject] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Nftables::Rules::Mdns] None:None
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
File[/etc/sysctl.d/99-sysctl.conf] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/base.pp:43
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-reject_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Augeas[kmod::setting kmod::blacklist algif_aead algif_aead] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Concat[nftables-inet-filter-chain-FORWARD] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Cron[gitlab-backup config] /etc/puppetlabs/code/environments/production/site/profile/manifests/gitlab.pp:34
Augeas[kmod::setting kmod::blacklist floppy floppy] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Sshkey[rpi5-b1.rjstuart.id.au_rsa] /etc/puppetlabs/code/environments/production/modules/ssh/manifests/hostkeys.pp:78
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[FORWARD-log_discarded] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:114
Concat_fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/nftables/puppet/ip-nat-chain-INPUT.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Nftables::Rule[default_in-accept_broadcast_to_udp_161] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
Ssh_authorized_key[root_robert@keep_ed25519] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:17
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Nftables::Rule[OUTPUT-lo] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:69
Nftables::Rule[INPUT-type@ip-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:99
Ini_setting[master/trusted_server_facts] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat_file[nftables-ip6-nat-chain-PREROUTING6] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-type_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Kmod::Blacklist[algif_aead] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Concat_file[nftables-ip-nat-chain-DOCKER] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Nftables::Rule[default_out-all] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/out/all.pp:3
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-reject] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-default_in-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-FORWARD-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/root/.bashrc.d] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:28
Class[Puppet_agent] /etc/puppetlabs/code/environments/production/site/profile/manifests/puppet_agent.pp:47
File[/etc/systemd/system/docker-pihole.service] /etc/puppetlabs/code/environments/production/modules/docker/manifests/run.pp:649
File[/etc/systemd/system/nftables.service.d/puppet_nft.conf] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/dropin_file.pp:64
Concat::Fragment[nftables-inet-filter-chain-default_in-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Apt::Source[debian-security] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:429
Class[Nftables::Rules::Ssh] None:None
Kmod::Setting[kmod::blacklist sctp] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Ini_setting[agent/pluginsync] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat[nftables-inet-filter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:16
Class[Ssh::Server::Config] None:None
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-type_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Kmod::Setting[kmod::blacklist l2tp_eth] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Class[Systemd::Journald] None:None
Class[Profile::Kmod] None:None
Concat_fragment[nftables-ip-nat-chain-DOCKER-rule-counter] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/usr/local/bin/os_patching_fact_generation.sh] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:219
Nftables::Rule[DOCKER_ISOLATION_STAGE_2-counter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:37
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[auth.conf.d] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:401
Concat_fragment[nftables-inet-filter-chain-default_in-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Globals] None:None
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-reject] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Systemd::Manage_unit[collect-packages-facts.timer] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/timer_wrapper.pp:94
Package[tzdata] /etc/puppetlabs/code/environments/production/modules/timezone/manifests/init.pp:90
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-http_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Kmod::Blacklist[l2tp_eth] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Nftables::Rule[POSTROUTING-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:47
File[/etc/modprobe.d/aliases.conf] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:43
Ssh_authorized_key[robert_robert@keep_rsa] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:58
Class[Ssh::Hostkeys] None:None
Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-ip-nat-chain-INPUT-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/root/.bashrc.d/bash_config] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:41
Nftables::Rule[PREROUTING-docker] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:99
Class[Nftables::Inet_filter] None:None
Systemd::Daemon_reload[collect-packages-facts.service] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/unit_file.pp:122
Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Kmod::Setting[kmod::install algif_aead] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/install.pp:16
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Nftables::Rule[DOCKER_USER-counter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:37
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
File[/home/robert/.bashrc.d/bashrc_user_prompt] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/robert.pp:40
Concat[nftables-ip6-nat-chain-PREROUTING6] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Exec[update-sysctl.conf-net.ipv4.ip_forward] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:77
Ini_setting[master/ignorecache] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat_file[/etc/ssh/sshd_config] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Kmod::Option[rfkill] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:71
Concat_fragment[nftables-inet-filter-chain-OUTPUT-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-INPUT-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Profile::Base::Time] None:None
Concat_fragment[nftables-ip-nat-body] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip-nat-chain-POSTROUTING-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Nftables::Rule[INPUT-reject] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:58
Concat_fragment[nftables-ip-nat-chain-INPUT-rule-type_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Ssh_authorized_key[robert_robertstuart@um790] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:58
Nftables::Chain[INPUT-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:89
Concat_fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Ssh_authorized_key[robert_robert@keep_ed25519] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:58
Class[Docker::Systemd_reload] None:None
Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Sysctl[net.ipv4.ip_forward] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/base.pp:24
Cron[Run apt autoremove on reboot] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:390
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_file[nftables-inet-filter-chain-DOCKER_USER] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat::Fragment[nftables-inet-filter-chain-default_in-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Nftables::Rule[OUTPUT-jump_global] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:69
Nftables::Chain[DOCKER_USER] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:29
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat[nftables-ip-nat-chain-DOCKER] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Settings] None:None
File[/etc/systemd/system/docker.service.d/service-overrides.conf] /etc/puppetlabs/code/environments/production/modules/docker/manifests/service.pp:340
Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[dnsclient_resolver_config_file] /etc/puppetlabs/code/environments/production/modules/dnsclient/manifests/init.pp:75
Ini_setting[agent/trusted_server_facts] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-reject_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
File[/home/robert] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:70
Kmod::Setting[kmod::blacklist l2tp_netlink] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Class[Sysctl::Base] None:None
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Exec[gitlab_reconfigure] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/service.pp:62
Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcpc_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpc_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-ip-nat-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[preferences] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:373
Class[Puppet_agent::Osfamily::Debian] None:None
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/nftables/puppet/ip6-nat-chain-PREROUTING6.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
File[/etc/default/docker-storage] /etc/puppetlabs/code/environments/production/modules/docker/manifests/service.pp:423
Concat_file[nftables-inet-filter-chain-INPUT] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-type_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Ssh_authorized_key[root_robert@um790] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:17
File[sources.list.d] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:363
Apt::Setting[sources-openvox8-release] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:369
Concat_fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[default_fwd-jump_docker] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:55
File[/etc/nftables/puppet/inet-filter-chain-global.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-docker] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
File[/var/lib/pihole/data] /etc/puppetlabs/code/environments/production/site/profile/manifests/pihole.pp:16
Class[Profile::Rpi] None:None
File[10_robert_to_root] /etc/puppetlabs/code/environments/production/modules/sudo/manifests/conf.pp:124
Nftables::Chain[POSTROUTING6] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:18
Nftables::Rule[FORWARD-jump_global] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:102
Concat::Fragment[nftables-ip6-nat-body] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:54
Concat_fragment[nftables-ip6-nat-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Systemd::Daemon_reload[nftables.service] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/dropin_file.pp:85
Nftables::Chain[DOCKER] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:29
File[/etc/sysctl.d/vm.swappiness.conf] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:55
Concat::Fragment[nftables-inet-filter-chain-default_fwd-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_global] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Vim::Params] None:None
Ini_setting[puppet-agent-splaylimit] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/configure.pp:12
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/nftables/puppet/ip-nat-chain-POSTROUTING.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Docker::Run[pihole] /etc/puppetlabs/code/environments/production/site/profile/manifests/pihole.pp:39
Stage[deploy_app] /etc/puppetlabs/code/environments/production/modules/stdlib/manifests/stages.pp:30
Package[openssh-server] /etc/puppetlabs/code/environments/production/modules/ssh/manifests/server/install.pp:10
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Nftables::Rule[default_fwd-jump_docker_user] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:55
Concat[nftables-inet-filter-chain-DOCKER] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Nftables::Rule[OUTPUT-jump_default_out] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:51
Concat_fragment[nftables-ip-nat-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[PREROUTING-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:27
File[/etc/timezone] /etc/puppetlabs/code/environments/production/modules/timezone/manifests/init.pp:108
Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Augeas[kmod::setting kmod::blacklist sctp sctp] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
File[/home/robert/.bash_profile] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/robert.pp:28
Ini_setting[puppet-agent-runinterval] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/configure.pp:12
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpc] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Os_patching] /etc/puppetlabs/code/environments/production/modules/patching_as_code/manifests/init.pp:188
File[/home/robert/.profile] /etc/puppetlabs/code/environments/production/site/profile/manifests/user_type.pp:75
Stage[after] /etc/puppetlabs/code/environments/production/manifests/site.pp:10
Sshkey[rpi5-b1.rjstuart.id.au_dsa] /etc/puppetlabs/code/environments/production/modules/ssh/manifests/hostkeys.pp:94
Class[Puppet_agent::Prepare::Puppet_config] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare.pp:22
Nftables::Rule[default_in-dns_tcp] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/dns.pp:19
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Systemd::Install] None:None
Nftables::Rule[INPUT-accept_established_related] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter/in_out_conntrack.pp:3
Concat::Fragment[nftables-inet-filter-chain-INPUT-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Ini_setting[/trusted_server_facts] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/nftables/puppet/inet-filter.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:23
File[/etc/apt/auth.conf] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:476
Concat::Fragment[nftables-inet-filter-chain-DOCKER-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Nftables::Rule[OUTPUT-log_discarded] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:84
Augeas[kmod::setting kmod::option rfkill rfkill] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Class[Nftables::Rules::Dhcpv6_client] None:None
Nftables::Rule[OUTPUT-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:69
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-lo_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[OUTPUT-jump_docker@ip-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:99
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_file[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Class[Docker::Params] None:None
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Profile::Motd] None:None
Stage[setup_app] /etc/puppetlabs/code/environments/production/modules/stdlib/manifests/stages.pp:29
File[/etc/nftables/puppet/ip-nat-chain-PREROUTING.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_udp_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_file[nftables-ip-nat-chain-OUTPUT] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
File[/etc/apt/sources.list.d/gitlab_official_ce.list] /etc/puppetlabs/code/environments/production/modules/apt/manifests/setting.pp:69
Class[Profile::Base::Dns] None:None
Concat[/etc/ssh/sshd_config] /etc/puppetlabs/code/environments/production/modules/ssh/manifests/server/config.pp:35
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat[nftables-ip-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:16
Class[Ssh::Server] /etc/puppetlabs/code/environments/production/site/profile/manifests/ssh.pp:9
Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-docker] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-global-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Class[Profile::Patching] None:None
Exec[os_patching::exec::fact] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:357
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-jump_global_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/var/cache/os_patching/block_patching_on_warnings] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:256
Apt::Setting[list-docker] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:369
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_file[nftables-ip-nat] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
File[/etc/apt/sources.list.d/debian-security.sources] /etc/puppetlabs/code/environments/production/modules/apt/manifests/setting.pp:69
Class[Apt::Update] None:None
Concat::Fragment[nftables-ip-nat-chain-INPUT-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[sources.list] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:354
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip6-nat-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:34
Concat_fragment[nftables-ip-nat-chain-OUTPUT-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/nftables/puppet/inet-filter-chain-default_fwd.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
File[/etc/modprobe.d/rfkill.conf] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:29
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Nftables::Rules::Out::All] None:None
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-reject] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Class[Gitlab::Host_config] None:None
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-default_in-rule-dns_udp_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Profile::Modemmanager] None:None
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Puppet_agent::Service] None:None
File[/etc/systemd/system/collect-packages-facts.service] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/unit_file.pp:109
Augeas[kmod::setting kmod::blacklist l2tp_netlink l2tp_netlink] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Nftables::Config[ip-nat] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:3
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
File[/etc/apt/keyrings/docker.asc] /etc/puppetlabs/code/environments/production/modules/apt/manifests/keyring.pp:65
Nftables::Chain[default_out] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:26
Nftables::Rule[default_fwd-idocker_odocker_accept] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:55
Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Nftables::Rule[PREROUTING6-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/ip_nat.pp:27
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_file[nftables-ip-nat-chain-PREROUTING] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Nftables::Rule[DOCKER_ISOLATION_STAGE_2-drop] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/docker_ce.pp:37
Concat_fragment[nftables-inet-filter-chain-global-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat::Fragment[nftables-ip-nat-chain-OUTPUT-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat_fragment[nftables-inet-filter-chain-default_in-rule-ssh] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Exec[docker-pihole-systemd-reload] /etc/puppetlabs/code/environments/production/modules/docker/manifests/run.pp:715
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Apt::Keyring[gitlab_ee.asc] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:209
Kmod::Blacklist[sctp] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Exec[enforce-sysctl-value-vm.swappiness] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:92
File[/etc/nftables/puppet/inet-filter-chain-default_in.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
Concat_fragment[nftables-inet-filter-chain-default_out-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
File[/etc/nftables/puppet/ip-nat-chain-DOCKER.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:21
File[/root/.bash_logout] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/root.pp:25
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Class[Profile::Hardware] None:None
Concat_fragment[nftables-ip-nat-chain-DOCKER-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Apt::Setting[list-gitlab_official_ce] /etc/puppetlabs/code/environments/production/modules/apt/manifests/source.pp:369
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-all] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Package[gitlab-omnibus] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/install.pp:27
Nftables::Rule[default_in-ssh] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/ssh.pp:6
Augeas[kmod::setting kmod::blacklist 8192cu 8192cu] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
File[/usr/local/bin/package_fact_collection.sh] /etc/puppetlabs/code/environments/production/site/profile/manifests/packages.pp:27
Ini_setting[master/configtimeout] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-reject] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Service[ssh] /etc/puppetlabs/code/environments/production/modules/ssh/manifests/server/service.pp:18
File[/etc/sudoers.d] /etc/puppetlabs/code/environments/production/modules/sudo/manifests/init.pp:222
Ini_setting[main/pluginsync] /etc/puppetlabs/code/environments/production/modules/puppet_agent/manifests/prepare/puppet_config.pp:33
File[/var/cache/os_patching/reboot_override] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:272
Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_file[nftables-inet-filter-chain-default_fwd] /etc/puppetlabs/code/environments/production/modules/concat/manifests/init.pp:136
Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Stage[deploy_infra] /etc/puppetlabs/code/environments/production/modules/stdlib/manifests/stages.pp:28
Class[Profile::Ssh] None:None
Augeas[kmod::setting kmod::blacklist l2tp_ppp l2tp_ppp] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Class[Gitlab] /etc/puppetlabs/code/environments/production/site/profile/manifests/gitlab.pp:17
Concat[nftables-inet-filter-chain-OUTPUT] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Concat_fragment[nftables-ip-nat-chain-INPUT-rule-policy] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-type] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Stage[runtime] /etc/puppetlabs/code/environments/production/modules/stdlib/manifests/stages.pp:26
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Class[Nftables::Rules::Dns] None:None
Exec[update-alternatives --set editor /usr/bin/vim.nox] /etc/puppetlabs/code/environments/production/modules/vim/manifests/init.pp:143
File[/etc/systemd/system/nftables.service.d] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/dropin_file.pp:52
File[/opt/gitlab-shell/authorized_keys] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/host_config.pp:72
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Apt::Source[gitlab_official_ee] /etc/puppetlabs/code/environments/production/modules/gitlab/manifests/omnibus_package_repository.pp:60
Concat[nftables-ip-nat-chain-OUTPUT] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Concat::Fragment[nftables-inet-filter-chain-INPUT-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Nftables::Chain[INPUT] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:17
Package[dphys-swapfile] /etc/puppetlabs/code/environments/production/site/profile/manifests/dphys_swap.pp:9
File[/etc/nftables/puppet/ip-nat.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/config.pp:23
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Class[Nftables::Rules::Http] None:None
Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-lo_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Kmod::Setting[kmod::blacklist floppy] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Class[Nftables::Rules::Docker_ce] None:None
Augeas[kmod::setting kmod::blacklist l2tp_eth l2tp_eth] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Concat[nftables-ip-nat-chain-INPUT] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:13
Augeas[kmod::setting kmod::blacklist sctp_diag sctp_diag] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/setting.pp:61
Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-docker_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-default_fwd-header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Sshkey[rpi5-b1.rjstuart.id.au_ed25519] /etc/puppetlabs/code/environments/production/modules/ssh/manifests/hostkeys.pp:78
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Package[sudo] /etc/puppetlabs/code/environments/production/modules/sudo/manifests/package.pp:71
File[/home/robert/.vimrc] /etc/puppetlabs/code/environments/production/site/profile/manifests/users/robert.pp:45
Concat_fragment[nftables-inet-filter-chain-default_out-rule-all_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-default_out-rule-all] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-DOCKER-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Kmod::Setting[kmod::blacklist algif_aead] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
File[/etc/nftables/puppet.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:230
Class[Docker::Install] None:None
Kmod::Setting[kmod::option rfkill] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/option.pp:24
File[/etc/apt/sources.list.d/openvox8-release.sources] /etc/puppetlabs/code/environments/production/modules/apt/manifests/setting.pp:69
File[/etc/apt/keyrings/gitlab_ee.asc] /etc/puppetlabs/code/environments/production/modules/apt/manifests/keyring.pp:76
File[/var/cache/os_patching] /etc/puppetlabs/code/environments/production/modules/os_patching/manifests/init.pp:214
File[/etc/motd] /etc/puppetlabs/code/environments/production/site/profile/manifests/motd.pp:6
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-lo_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
File[/etc/default/docker] /etc/puppetlabs/code/environments/production/modules/docker/manifests/service.pp:496
Nftables::Chain[default_in] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:26
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Class[Profile::Postfix] None:None
Service[nftables] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:249
Concat_fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Package[gnupg] /etc/puppetlabs/code/environments/production/modules/apt/manifests/init.pp:494
Kmod::Blacklist[8192cu] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/init.pp:56
Concat_fragment[nftables-ip-nat-chain-DOCKER-footer] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Exec[docker-systemd-reload] /etc/puppetlabs/code/environments/production/modules/docker/manifests/systemd_reload.pp:5
Concat::Fragment[nftables-ip-nat-chain-OUTPUT-footer] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/chain.pp:30
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Nftables::Rule[OUTPUT-policy] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter.pp:69
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-wireguard] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Kmod::Setting[kmod::blacklist pcspkr] /etc/puppetlabs/code/environments/production/modules/kmod/manifests/blacklist.pp:14
Class[Profile::Base::Timezone] None:None
Class[Nftables::Rules::Https] None:None
Nftables::Rule[default_in-dns_udp] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rules/dns.pp:19
File[/etc/apt/apt.conf.d/15update-stamp] /etc/puppetlabs/code/environments/production/modules/apt/manifests/setting.pp:69
Concat_fragment[nftables-inet-filter-chain-default_in-rule-http_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Reboot_if_pending[Patching as Code] /etc/puppetlabs/code/environments/production/modules/patching_as_code/manifests/init.pp:398
Anchor[patching_as_code::start] /etc/puppetlabs/code/environments/production/modules/patching_as_code/manifests/init.pp:424
Anchor[patching_as_code::post] /etc/puppetlabs/code/environments/production/modules/patching_as_code/manifests/init.pp:507
Schedule[Patching as Code - Patch Window] /etc/puppetlabs/code/environments/production/modules/patching_as_code/functions/process_patch_groups.pp:37
Class[Profile::Nftables] None:None
Class[Nftables] /etc/puppetlabs/code/environments/production/site/profile/manifests/nftables.pp:10
Class[Systemd] /etc/puppetlabs/code/environments/production/site/profile/manifests/systemd.pp:14
Ini_setting[SystemKeepFree] /etc/puppetlabs/code/environments/production/modules/systemd/manifests/journald.pp:13
File[/etc/nftables/puppet-preflight] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:204
Systemd::Dropin_file[puppet_nft.conf] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:276
Nftables::Rule[default_in-drop_spotify_udp_57621] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
Nftables::Rule[default_out-dhcp_ipv4] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
Nftables::Rule[default_in-dhcp_ipv4] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
File[/etc/nftables/puppet] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:230
Nftables::Rule[default_in-drop_broadcast_to_udp_38899] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
File[/etc/nftables.conf] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:184
File[/etc/nftables/puppet-preflight.nft] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:204
Exec[nftables_memory_state_check] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:258
Service[firewalld] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:290
Exec[nft validate] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:226
File[/etc/nftables] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:204
Nftables::Rule[default_in-drop_udp_137_138] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
Package[nftables] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:172
Nftables::Rule[default_in-drop_broadcast_to_udp_20000] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
Nftables::Rule[default_in-allow_incoming_to_udp_1900] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
Nftables::Rule[default_in-ssh_2022] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/init.pp:313
Exec[sysctl-net.netfilter.nf_conntrack_tcp_be_liberal] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:69
File[/etc/sysctl.d/net.netfilter.nf_conntrack_tcp_be_liberal.conf] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:55
Exec[update-sysctl.conf-net.netfilter.nf_conntrack_tcp_be_liberal] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:77
Exec[enforce-sysctl-value-net.netfilter.nf_conntrack_tcp_be_liberal] /etc/puppetlabs/code/environments/production/modules/sysctl/manifests/init.pp:92
Nftables::Rule[FORWARD-drop_invalid] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter/fwd_conntrack.pp:9
Nftables::Rule[OUTPUT-drop_invalid] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter/in_out_conntrack.pp:16
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Nftables::Rule[INPUT-drop_invalid] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/inet_filter/in_out_conntrack.pp:12
Concat_fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:68
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid_header] /etc/puppetlabs/code/environments/production/modules/nftables/manifests/rule.pp:62
Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid_header] /etc/puppetlabs/code/environments/production/modules/concat/manifests/fragment.pp:47
Sysctl[net.netfilter.nf_conntrack_tcp_be_liberal] /etc/puppetlabs/code/environments/production/site/profile/manifests/nftables.pp:30

Edges

Source Relationship Target
Ini_setting[SystemKeepFree] notifies Service[systemd-journald]
Class[Systemd::Journald] contains Ini_setting[SystemKeepFree]
Class[Systemd] contains Class[Systemd::Install]
Ini_setting[SystemMaxUse] notifies Service[systemd-journald]
Systemd::Journald::Dropin_file[override.conf] contains File[/etc/systemd/journald.conf.d]
File[/etc/systemd/journald.conf.d/override.conf] notifies Service[systemd-journald]
Stage[main] contains Class[Systemd]
Class[Systemd] contains Class[Systemd::Timedatectl]
Ini_setting[Storage] notifies Service[systemd-journald]
Class[Systemd] contains Anchor[systemd::reexec_before_reload]
Class[Systemd::Journald] contains Ini_setting[SystemMaxUse]
Stage[main] contains Class[Profile::Systemd]
Systemd::Journald::Manage_dropin[override.conf] contains Systemd::Journald::Dropin_file[override.conf]
Class[Systemd] contains Class[Systemd::Journald]
Class[Systemd::Journald] contains Ini_setting[Storage]
Systemd::Journald::Dropin_file[override.conf] contains File[/etc/systemd/journald.conf.d/override.conf]
Class[Profile::Systemd] contains Systemd::Journald::Manage_dropin[override.conf]
Systemd::Daemon_reload[collect-packages-facts.service] contains Exec[systemd-collect-packages-facts.service-systemctl-daemon-reload]
Systemd::Daemon_reload[collect-packages-facts.timer] contains Exec[systemd-collect-packages-facts.timer-systemctl-daemon-reload]
Anchor[systemd::reexec_before_reload] required-by Exec[systemd-collect-packages-facts.service-systemctl-daemon-reload]
Anchor[systemd::reexec_before_reload] required-by Exec[systemd-collect-packages-facts.timer-systemctl-daemon-reload]
Service[nftables] subscription-of Exec[nftables_generate_hash]
Anchor[systemd::reexec_before_reload] required-by Exec[systemd-nftables.service-systemctl-daemon-reload]
Class[Nftables] contains Exec[nftables_memory_state_check]
Class[Nftables] contains Exec[nftables_generate_hash]
Class[Systemd] contains Exec[systemctl set-default multi-user.target]
Systemd::Daemon_reload[nftables.service] contains Exec[systemd-nftables.service-systemctl-daemon-reload]
Exec[nftables_memory_state_check] notifies Service[nftables]
Class[Nftables] contains Nftables::Rule[default_in-drop_broadcast_to_udp_38899]
Class[Nftables] contains Nftables::Rule[default_in-accept_broadcast_to_udp_161]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid_header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid_header]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid]
Class[Nftables] contains File[/etc/nftables/puppet.nft]
Class[Nftables] contains Nftables::Rule[default_in-drop_udp_137_138]
Class[Nftables] contains Nftables::Rule[default_in-drop_broadcast_to_udp_20000]
Nftables::Rule[OUTPUT-drop_invalid] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid]
Nftables::Rule[INPUT-drop_invalid] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid_header]
Class[Nftables] contains Package[nftables]
Class[Nftables] contains Exec[nft validate]
Class[Nftables] contains File[/etc/nftables/puppet-preflight]
Class[Nftables] contains Nftables::Rule[default_in-ssh_2022]
Class[Nftables] contains Nftables::Rule[default_out-dhcp_ipv4]
Stage[main] contains Class[Nftables]
File[/etc/systemd/system/collect-packages-facts.timer] notifies Systemd::Daemon_reload[collect-packages-facts.timer]
Kmod::Setting[kmod::blacklist l2tp_netlink] contains Augeas[kmod::setting kmod::blacklist l2tp_netlink l2tp_netlink]
Class[Gitlab::Host_config] before Class[Gitlab::Omnibus_config]
Class[Nftables::Inet_filter::Fwd_conntrack] contains Nftables::Rule[FORWARD-accept_established_related]
File[/usr/local/bin/package_fact_collection.sh] required-by Systemd::Timer_wrapper[collect-packages-facts]
Stage[main] contains Class[Apt::Update]
Class[Nftables::Rules::Mdns] contains Nftables::Rule[default_in-mdns_v6]
Apt::Keyring[openvox-keyring.gpg] contains File[/etc/apt/keyrings/openvox-keyring.gpg]
Nftables::Rule[FORWARD-policy] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-policy_header]
Profile::User_type[robert] contains File[/home/robert/.bash_logout]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-https] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-https]
Class[Puppet_agent::Install] contains Package[openvox-agent]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138]
Class[Docker] contains Class[Docker::Config]
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy] contains Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy]
Nftables::Rule[INPUT-policy@ip-nat] contains Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-policy]
Nftables::Chain[PREROUTING] contains File[/etc/nftables/puppet/ip-nat-chain-PREROUTING.nft]
Nftables::Chain[OUTPUT-nat] contains Concat::Fragment[nftables-ip-nat-chain-OUTPUT-footer]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter]
Stage[main] contains Class[Ssh::Server::Config]
Class[Docker::Systemd_reload] contains Exec[docker-systemd-reload]
Stage[main] contains Class[Stdlib::Manage]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop_header] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop_header]
Class[Profile::Users::Robert] contains File[/home/robert/.bashrc.d/bash_config]
Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2] notifies Exec[nft validate]
Concat[nftables-ip-nat-chain-OUTPUT] contains Concat_file[nftables-ip-nat-chain-OUTPUT]
Class[Nftables::Rules::Docker_ce] contains Nftables::Chain[DOCKER_ISOLATION_STAGE_2]
File[/etc/nftables.conf] notifies Service[nftables]
File[preferences.d] notifies Class[Apt::Update]
Nftables::Rule[DOCKER_USER-counter] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter]
Class[Sysctl::Base] contains File[/etc/sysctl.d]
Class[Nftables::Inet_filter] contains Nftables::Rule[INPUT-policy]
Profile::User_type[robert] contains Group[robert]
Nftables::Chain[default_in] contains File[/etc/nftables/puppet/inet-filter-chain-default_in.nft]
Nftables::Rule[default_fwd-jump_docker] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker]
Class[Profile::Packages] contains File[/etc/puppetlabs/facter]
Stage[main] contains Class[Gitlab]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp]
Exec[nft validate] before File[/etc/nftables/puppet/ip-nat-chain-OUTPUT.nft]
Class[Kmod] contains Kmod::Blacklist[floppy]
Class[Profile::Users::Root] contains File[/root/.bash_profile]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-lo] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-lo]
Class[Gitlab::Omnibus_package_repository] contains Apt::Source[gitlab_official_ee]
Class[Sysctl::Base] contains Sysctl[vm.swappiness]
File[/etc/nftables/puppet/ip-nat-chain-POSTROUTING.nft] notifies Service[nftables]
Sysctl[vm.swappiness] contains Exec[sysctl-vm.swappiness]
Class[Gitlab::Install] contains Package[gitlab-omnibus]
Nftables::Rule[INPUT-type] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-type_header]
Concat[nftables-ip-nat-chain-DOCKER] notifies Exec[nft validate]
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-policy] contains Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-policy]
File[/home/robert] required-by Ssh_authorized_key[robert_robert@um790]
Class[Profile::Dphys_swap] contains File[/etc/dphys-swapfile]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621_header]
File[/etc/sysctl.d/vm.swappiness.conf] required-by Exec[sysctl-vm.swappiness]
Class[Docker::Service] contains Exec[docker-systemd-reload-before-service]
Nftables::Rule[default_out-dhcpc] contains Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpc_header]
File[/etc/nftables/puppet.nft] notifies Service[nftables]
Class[Gitlab::Host_config] contains File[/home/gitlab-consul/.pgpass]
File[/home/robert] required-by Ssh_authorized_key[robert_robertstuart@um790]
Class[Profile::Dphys_swap] contains Package[dphys-swapfile]
Class[Nftables::Rules::Https] contains Nftables::Rule[default_in-https]
Stage[deploy_app] before Stage[deploy]
File[/etc/nftables/puppet/inet-filter-chain-OUTPUT.nft] notifies Service[nftables]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-type] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-type]
File[/etc/systemd/system/docker.service.d/service-overrides.conf] notifies Exec[docker-systemd-reload-before-service]
Nftables::Rule[DOCKER_ISOLATION_STAGE_1-iifname] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname]
Stage[main] contains Class[Profile::Rsyslog]
File[/etc/apt/sources.list.d/docker.list] notifies Class[Apt::Update]
File[auth.conf.d] notifies Class[Apt::Update]
Class[Nftables::Inet_filter] contains Nftables::Rule[OUTPUT-type]
Nftables::Rule[FORWARD-jump_global] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global]
File[/etc/systemd/system/docker-pihole.service] notifies Service[docker-pihole]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667]
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-header] contains Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-header]
Nftables::Rule[default_in-https] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-https_header]
Nftables::Rule[POSTROUTING-policy] contains Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy_header]
Nftables::Chain[DOCKER-nat] contains Concat::Fragment[nftables-ip-nat-chain-DOCKER-footer]
File[/etc/nftables/puppet/ip6-nat-chain-PREROUTING6.nft] notifies Service[nftables]
File[sources.list] notifies Class[Apt::Update]
Nftables::Rule[PREROUTING-docker] contains Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-docker]
Stage[main] contains Class[Nftables::Rules::Wireguard]
Nftables::Chain[FORWARD] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-header]
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-policy_header] contains Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-policy_header]
Class[Profile::Gitlab] contains Cron[gitlab-backup data]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[agent/app_management]
Class[Gitlab] contains Class[Gitlab::Omnibus_config]
Nftables::Rule[INPUT-accept_established_related] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related_header]
Nftables::Rule[FORWARD-accept_established_related] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related_header]
Package[nftables] required-by Concat[nftables-ip-nat-chain-DOCKER]
Class[Nftables::Ip_nat] contains Nftables::Config[ip6-nat]
Class[Nftables::Ip_nat] contains Nftables::Rule[PREROUTING6-policy]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[agent/configtimeout]
Nftables::Chain[DOCKER-nat] contains File[/etc/nftables/puppet/ip-nat-chain-DOCKER.nft]
Nftables::Rule[default_in-allow_incoming_to_udp_1900] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out]
File[/etc/nftables/puppet/inet-filter.nft] notifies Service[nftables]
Package[nftables] before Concat[nftables-ip6-nat]
Class[Gitlab] contains Class[Gitlab::Host_config]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6_header]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-http] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-http]
Class[Kmod] contains Kmod::Install[algif_aead]
Class[Ssh::Server::Config] notifies Class[Ssh::Server::Service]
Stage[main] contains Class[Nftables::Rules::Out::All]
Nftables::Rule[FORWARD-log_discarded] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded_header]
Nftables::Rule[DOCKER_ISOLATION_STAGE_1-iifname] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname_header]
Concat[nftables-inet-filter-chain-global] contains Concat_file[nftables-inet-filter-chain-global]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker]
Concat[nftables-ip-nat] contains Concat_file[nftables-ip-nat]
Package[nftables] required-by Concat[nftables-ip6-nat-chain-PREROUTING6]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept]
Systemd::Unit_file[collect-packages-facts.timer] contains Systemd::Daemon_reload[collect-packages-facts.timer]
Nftables::Rule[default_out-all] contains Concat::Fragment[nftables-inet-filter-chain-default_out-rule-all]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[main/ignorecache]
Stage[main] contains Class[Ssh::Server::Install]
Class[Nftables::Inet_filter] contains Nftables::Rule[OUTPUT-lo]
File[/etc/sysctl.d/net.ipv4.ip_forward.conf] notifies Exec[sysctl-net.ipv4.ip_forward]
Nftables::Config[inet-filter] contains Concat[nftables-inet-filter]
Class[Nftables::Rules::Ssh] contains Nftables::Rule[default_in-ssh]
Nftables::Rule[default_fwd-jump_docker_user] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user_header]
Concat[nftables-inet-filter-chain-OUTPUT] contains Concat_file[nftables-inet-filter-chain-OUTPUT]
Nftables::Chain[DOCKER_ISOLATION_STAGE_2] contains Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[/ignorecache]
Nftables::Rule[default_out-dhcpv6_client] contains Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client_header]
Nftables::Rule[default_fwd-idocker_onot_accept] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept]
File[/etc/systemd/system/docker-pihole.service] subscription-of Exec[docker-pihole-systemd-reload]
Nftables::Chain[default_out] contains Nftables::Rule[OUTPUT-jump_default_out]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[master/trusted_server_facts]
Package[nftables] required-by Concat[nftables-inet-filter-chain-DOCKER]
Class[Ssh::Hostkeys] contains Sshkey[rpi5-b1.rjstuart.id.au_ed25519]
Kmod::Blacklist[l2tp_netlink] contains Kmod::Setting[kmod::blacklist l2tp_netlink]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[agent/trusted_server_facts]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client_header]
File[apt.conf.d] notifies Class[Apt::Update]
Class[main] contains Node[default]
File[/home/robert] required-by Ssh_authorized_key[robert_robert@keep_rsa]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-reject_header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-reject_header]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[PREROUTING-docker]
Class[Nftables::Inet_filter] contains Nftables::Chain[global]
Nftables::Chain[OUTPUT] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-header]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-OUTPUT.nft]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000]
Class[Os_patching] contains Cron[Cache patching data at reboot]
Class[Docker::Service] before Docker::Run[pihole]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-DOCKER.nft]
Stage[main] contains Class[Profile::Pihole]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-footer] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-footer]
Class[Gitlab::Host_config] contains File[/etc/gitlab/skip-auto-reconfigure]
Class[Profile::Users::Root] contains Ssh_authorized_key[root_robert@keep_ed25519]
File[/etc/default/docker-storage] notifies Service[docker]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[/ignorecache]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-default_fwd.nft]
Concat[nftables-ip-nat-chain-DOCKER] contains Concat_file[nftables-ip-nat-chain-DOCKER]
File[/etc/localtime] required-by Exec[update_timezone]
Package[nftables] required-by Concat[nftables-inet-filter-chain-global]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-type] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-type]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[agent/app_management]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-footer] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-footer]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[default_fwd-jump_docker_user]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname_header] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname_header]
Apt::Keyring[docker.asc] contains File[/etc/apt/keyrings/docker.asc]
Class[Nftables::Inet_filter] contains Nftables::Rule[OUTPUT-policy]
Class[Kmod] contains File[/etc/modprobe.d/aliases.conf]
Class[Gitlab::Omnibus_config] subscription-of Exec[gitlab_reconfigure]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[main/pluginsync]
Concat[nftables-ip-nat-chain-POSTROUTING] contains Concat_file[nftables-ip-nat-chain-POSTROUTING]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter]
Class[Profile::Users::Root] contains User[root]
Class[Nftables::Ip_nat] contains Nftables::Rule[POSTROUTING6-type]
Class[Sysctl::Base] contains Sysctl[net.ipv4.ip_forward]
Package[nftables] required-by Concat[nftables-inet-filter-chain-OUTPUT]
Nftables::Rule[OUTPUT-reject] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-reject]
Nftables::Rule[default_out-dhcpv6_client] contains Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client]
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker] contains Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker]
Nftables::Rule[default_in-allow_web_10k] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k]
Nftables::Rule[PREROUTING-policy] contains Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-policy_header]
Nftables::Rule[DOCKER-counter] contains Concat::Fragment[nftables-ip-nat-chain-DOCKER-rule-counter]
File[/usr/local/bin/docker-run-pihole-stop.sh] subscription-of Exec[docker-pihole-systemd-reload]
Concat[nftables-inet-filter] notifies Exec[nft validate]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[default_fwd-idocker_onot_accept]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-header] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-header]
Class[Kmod] contains Kmod::Blacklist[sctp_diag]
Nftables::Rule[default_in-wireguard] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-wireguard_header]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-default_in.nft]
Stage[setup] before Stage[main]
Class[Profile::Gitlab] contains Cron[gitlab-backup config]
Nftables::Chain[DOCKER_ISOLATION_STAGE_1] contains Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1]
Kmod::Setting[kmod::blacklist l2tp_ip6] contains Augeas[kmod::setting kmod::blacklist l2tp_ip6 l2tp_ip6]
File[/etc/nftables/puppet/ip-nat.nft] notifies Service[nftables]
Class[Profile::Pihole] contains File[/var/lib/pihole]
Stage[main] contains Class[main]
Class[Profile::Users::Root] contains Package[rootfiles]
Systemd::Timer_wrapper[collect-packages-facts] contains Systemd::Manage_unit[collect-packages-facts.timer]
Class[Os_patching] contains File[/var/cache/os_patching/reboot_override]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-type_header] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-type_header]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-https_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-https_header]
Nftables::Rule[OUTPUT-lo] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-lo_header]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-reject_header] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-reject_header]
File[/etc/nftables/puppet/inet-filter-chain-DOCKER_ISOLATION_STAGE_1.nft] notifies Service[nftables]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter_header] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter_header]
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-footer] contains Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-footer]
Nftables::Chain[PREROUTING] contains Concat[nftables-ip-nat-chain-PREROUTING]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_global_header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-jump_global_header]
File[/etc/systemd/system/collect-packages-facts.service] notifies Systemd::Daemon_reload[collect-packages-facts.service]
Stage[main] contains Class[Settings]
Nftables::Rule[default_in-drop_broadcast_to_udp_38899] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899_header]
File[keyrings] required-by File[/etc/apt/keyrings/openvox-keyring.gpg]
Systemd::Manage_unit[collect-packages-facts.timer] before Service[collect-packages-facts.timer]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-reject] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-reject]
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy_header] contains Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy_header]
Nftables::Chain[default_in] contains Nftables::Rule[INPUT-jump_default_in]
Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2] contains Concat_file[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2]
Stage[main] contains Class[Systemd::Install]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[agent/pluginsync]
Concat[nftables-inet-filter-chain-INPUT] contains Concat_file[nftables-inet-filter-chain-INPUT]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-reject_header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-reject_header]
Nftables::Chain[PREROUTING] contains Concat::Fragment[nftables-ip-nat-chain-PREROUTING-footer]
Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-type] contains Concat_fragment[nftables-ip-nat-chain-INPUT-rule-type]
Nftables::Rule[PREROUTING6-policy] contains Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy]
Class[Profile::Packages] contains File[/etc/puppetlabs/facter/facts.d]
File[/etc/apt/apt.conf.d/15update-stamp] notifies Class[Apt::Update]
Nftables::Rule[OUTPUT-accept_established_related] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related_header]
Apt::Setting[sources-openvox8-release] contains File[/etc/apt/sources.list.d/openvox8-release.sources]
Nftables::Rule[OUTPUT-jump_default_out] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out_header]
Nftables::Rule[default_in-drop_spotify_udp_57621] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621]
Stage[main] contains Class[Gitlab::Service]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161]
Class[Profile::Rsyslog] contains Package[rsyslog]
Class[Os_patching] contains Cron[Run apt autoremove on reboot]
Class[Puppet_agent::Install] before Class[Puppet_agent::Configure]
Class[Ssh::Server::Service] before Class[Ssh::Hostkeys]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[main/trusted_server_facts]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[main/ignorecache]
Class[Nftables::Rules::Docker_ce] contains Nftables::Chain[DOCKER_ISOLATION_STAGE_1]
Class[Docker::Repos] before Class[Docker::Install]
Package[nftables] required-by File[/etc/nftables.conf]
Nftables::Rule[PREROUTING6-type] contains Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type]
Class[Ssh::Server] contains Class[Ssh::Hostkeys]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-INPUT.nft]
Stage[main] contains Class[Profile::Base::Sysctl]
Class[Nftables::Ip_nat] contains Nftables::Rule[PREROUTING6-type]
Stage[main] contains Class[Profile::Postfix]
Kmod::Blacklist[pcspkr] contains Kmod::Setting[kmod::blacklist pcspkr]
Class[Ssh::Server::Service] contains Service[ssh]
Class[Nftables::Ip_nat] contains Nftables::Chain[POSTROUTING6]
Package[nftables] before Concat[nftables-inet-filter]
Nftables::Rule[POSTROUTING-docker] contains Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker_header]
Nftables::Chain[DOCKER-nat] contains Concat::Fragment[nftables-ip-nat-chain-DOCKER-header]
Class[Docker::Service] contains Service[docker]
Class[Profile::Packages] contains File[/usr/local/bin/package_fact_collection.sh]
File[/etc/sudoers.d] required-by File[10_robert_to_root]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-wireguard_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-wireguard_header]
Apt::Source[raspi] contains Apt::Setting[sources-raspi]
Package[nftables] required-by Concat[nftables-inet-filter-chain-INPUT]
File[/etc/apt/sources.list.d/openvox8-release.sources] notifies Class[Apt::Update]
Nftables::Rule[default_in-drop_broadcast_to_udp_6667] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667]
Package[nftables] required-by Concat[nftables-inet-filter-chain-default_out]
Nftables::Rule[default_in-dns_tcp] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp]
Class[Docker::Service] contains File[/etc/systemd/system/docker.service.d/service-overrides.conf]
Nftables::Chain[DOCKER-nat] contains Concat[nftables-ip-nat-chain-DOCKER]
Class[Nftables::Ip_nat] contains Nftables::Chain[POSTROUTING]
File[/usr/local/bin/os_patching_fact_generation.sh] required-by Cron[Cache patching data at reboot]
File[keyrings] required-by File[/etc/apt/keyrings/gitlab_ce.asc]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[/trusted_server_facts]
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-type] contains Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-type]
Exec[nft validate] before File[/etc/nftables/puppet/ip-nat-chain-DOCKER.nft]
File[/etc/nftables/puppet] notifies Service[nftables]
Nftables::Config[ip-nat] contains Concat::Fragment[nftables-ip-nat-header]
Stage[main] contains Class[Nftables::Rules::Icmp]
Nftables::Rule[INPUT-log_discarded] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded_header]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[DOCKER-counter]
File[/etc/nftables/puppet/inet-filter-chain-DOCKER_ISOLATION_STAGE_2.nft] notifies Service[nftables]
Kmod::Setting[kmod::blacklist 8192cu] contains Augeas[kmod::setting kmod::blacklist 8192cu 8192cu]
Stage[main] contains Class[Stdlib::Stages]
Package[nftables] required-by Concat[nftables-ip-nat-chain-OUTPUT]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[master/app_management]
Class[Profile::Gitlab] contains Service[gitlab-runsvdir.service]
Exec[nft validate] before File[/etc/nftables/puppet/ip-nat-chain-PREROUTING.nft]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist sctp sctp]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-reject] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-reject]
Nftables::Rule[INPUT-reject] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-reject]
Package[openvox-agent] notifies Puppet_agent_end_run[present]
Nftables::Chain[FORWARD] contains File[/etc/nftables/puppet/inet-filter-chain-FORWARD.nft]
Nftables::Rule[DOCKER_ISOLATION_STAGE_1-counter] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter_header]
Stage[main] contains Class[Docker]
Kmod::Blacklist[l2tp_eth] contains Kmod::Setting[kmod::blacklist l2tp_eth]
Nftables::Chain[default_fwd] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-header]
Nftables::Rule[default_in-accept_broadcast_to_udp_161] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161]
Nftables::Rule[OUTPUT-reject] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-reject_header]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022_header]
File[/usr/local/bin/os_patching_fact_generation.sh] required-by Exec[os_patching::exec::fact]
Stage[main] contains Class[Nftables::Inet_filter::In_out_conntrack]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-footer] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_USER-footer]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-DOCKER_USER.nft]
Apt::Setting[conf-update-stamp] contains File[/etc/apt/apt.conf.d/15update-stamp]
Class[Profile::Users::Root] contains File[/root/.bashrc.d/bash_config]
Concat[nftables-inet-filter-chain-default_fwd] notifies Exec[nft validate]
Class[Kmod] contains Kmod::Blacklist[8192cu]
File[/etc/timezone] subscription-of Exec[update_timezone]
Apt::Setting[list-gitlab_official_ee] contains File[/etc/apt/sources.list.d/gitlab_official_ee.list]
Apt::Source[gitlab_official_ce] contains Apt::Keyring[gitlab_ce.asc]
Stage[main] contains Class[Ssh::Hostkeys]
Systemd::Manage_unit[collect-packages-facts.timer] contains Systemd::Unit_file[collect-packages-facts.timer]
Stage[main] contains Class[Ssh::Server]
Class[Ssh::Hostkeys] contains Sshkey[rpi5-b1.rjstuart.id.au_ecdsa]
Concat::Fragment[nftables-inet-filter-chain-default_in-footer] contains Concat_fragment[nftables-inet-filter-chain-default_in-footer]
Class[Nftables::Inet_filter] contains Nftables::Chain[default_out]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist floppy floppy]
Nftables::Rule[default_out-dhcpc] contains Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpc]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667_header]
Class[Gitlab::Omnibus_package_repository] required-by Package[gitlab-omnibus]
Class[Gitlab::Install] required-by Exec[gitlab_reconfigure]
Class[Profile::Packages] contains Systemd::Timer_wrapper[collect-packages-facts]
Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-policy] contains Concat_fragment[nftables-ip-nat-chain-INPUT-rule-policy]
Concat::Fragment[nftables-inet-filter-chain-global-footer] contains Concat_fragment[nftables-inet-filter-chain-global-footer]
Nftables::Chain[DOCKER] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER-footer]
Nftables::Rule[DOCKER_ISOLATION_STAGE_1-counter] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter]
Concat[nftables-ip-nat-chain-PREROUTING] notifies Exec[nft validate]
Concat::Fragment[nftables-ip6-nat-footer] contains Concat_fragment[nftables-ip6-nat-footer]
Exec[nft validate] before File[/etc/nftables/puppet/ip6-nat-chain-PREROUTING6.nft]
File[/etc/nftables/puppet/ip-nat-chain-OUTPUT.nft] notifies Service[nftables]
Apt::Source[gitlab_official_ee] contains Apt::Setting[list-gitlab_official_ee]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_udp_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-dns_udp_header]
Class[Nftables::Inet_filter] contains Nftables::Chain[default_in]
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client_header] contains Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client_header]
Nftables::Rule[DOCKER_ISOLATION_STAGE_2-drop] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop]
Stage[runtime] before Stage[setup_infra]
Kmod::Setting[kmod::blacklist sctp] contains Augeas[kmod::setting kmod::blacklist sctp sctp]
Class[Kmod] contains Kmod::Blacklist[sctp]
Stage[main] contains Class[Docker::Params]
Nftables::Config[ip-nat] contains Concat::Fragment[nftables-ip-nat-footer]
Class[Patching_as_code] contains File[patching_configuration.json]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related]
File[/usr/local/bin/docker-run-pihole-stop.sh] required-by Exec[docker-pihole-systemd-reload]
Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-type_header] contains Concat_fragment[nftables-ip-nat-chain-INPUT-rule-type_header]
Kmod::Blacklist[l2tp_ip] contains Kmod::Setting[kmod::blacklist l2tp_ip]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4]
Nftables::Config[ip6-nat] contains File[/etc/nftables/puppet/ip6-nat.nft]
Concat[nftables-ip6-nat] notifies Exec[nft validate]
Class[Profile::Users::Root] contains File[/root/.bashrc.d]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-header]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[/configtimeout]
Concat::Fragment[nftables-inet-filter-chain-global-header] contains Concat_fragment[nftables-inet-filter-chain-global-header]
File[/etc/nftables/puppet/inet-filter-chain-FORWARD.nft] notifies Service[nftables]
Nftables::Rule[PREROUTING-type] contains Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-type_header]
Nftables::Rule[INPUT-jump_global] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_global]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-policy_header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-policy_header]
Nftables::Chain[INPUT] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-header]
Package[nftables] required-by Concat[nftables-ip6-nat-chain-POSTROUTING6]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-ssh]
Class[Nftables::Rules::Out::All] contains Nftables::Rule[default_out-all]
Class[Profile::Modemmanager] contains Service[ModemManager]
Nftables::Chain[default_fwd] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-footer]
Sysctl[net.ipv4.ip_forward] contains File[/etc/sysctl.d/net.ipv4.ip_forward.conf]
Nftables::Chain[OUTPUT] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-footer]
Concat::Fragment[nftables-ip-nat-chain-OUTPUT-footer] contains Concat_fragment[nftables-ip-nat-chain-OUTPUT-footer]
Stage[main] contains Class[Nftables::Rules::Http]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-global.nft]
File[/etc/systemd/system/nftables.service.d/puppet_nft.conf] notifies Service[nftables]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_udp] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-dns_udp]
Nftables::Rule[FORWARD-jump_default_fwd] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd_header]
Nftables::Rule[POSTROUTING6-type] contains Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type_header]
Stage[main] contains Class[Profile::Base]
Class[main] contains Schedule[Patching as Code - High Priority Patch Window]
Concat[nftables-ip6-nat-chain-POSTROUTING6] notifies Exec[nft validate]
Class[Profile::Users::Root] contains Ssh_authorized_key[root_robert@keep_rsa]
Apt::Source[gitlab_official_ce] contains Apt::Setting[list-gitlab_official_ce]
Nftables::Chain[global] contains File[/etc/nftables/puppet/inet-filter-chain-global.nft]
Nftables::Rule[default_fwd-idocker_odocker_accept] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept_header]
Nftables::Rule[POSTROUTING6-policy] contains Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy]
File[/var/cache/os_patching/block_patching_on_warnings] notifies Exec[os_patching::exec::fact]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[main/configtimeout]
Nftables::Rule[POSTROUTING-policy] contains Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-policy]
Class[Nftables::Inet_filter] contains Nftables::Rule[INPUT-jump_global]
Stage[main] contains Class[Puppet_agent::Prepare::Puppet_config]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[agent/configtimeout]
File[/etc/nftables/puppet/inet-filter-chain-DOCKER_USER.nft] notifies Service[nftables]
Systemd::Manage_unit[collect-packages-facts.service] contains Systemd::Unit_file[collect-packages-facts.service]
Stage[main] contains Class[Profile::Vim]
Class[Profile::Users::Robert] contains File[/home/robert/.bashrc]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist pcspkr pcspkr]
Nftables::Rule[OUTPUT-jump_global] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global]
Concat::Fragment[nftables-ip-nat-footer] contains Concat_fragment[nftables-ip-nat-footer]
Stage[main] contains Class[Patching_as_code]
Class[Puppet_agent::Configure] notifies Class[Puppet_agent::Service]
Nftables::Chain[DOCKER_USER] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-footer]
Nftables::Rule[default_in-drop_incoming_to_udp_1900] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900]
Nftables::Config[ip6-nat] contains Concat[nftables-ip6-nat]
Nftables::Rule[default_in-dhcpv6_client] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client]
Nftables::Rule[default_in-mdns_v6] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6_header]
Nftables::Rule[OUTPUT-policy] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-policy_header]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[DOCKER_ISOLATION_STAGE_2-counter]
Nftables::Rule[default_in-accept_broadcast_to_udp_161] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161_header]
Class[Profile::Users::Robert] contains File[/home/robert/.bash_profile]
Nftables::Rule[default_in-drop_broadcast_to_udp_20000] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000_header]
Nftables::Chain[default_out] contains File[/etc/nftables/puppet/inet-filter-chain-default_out.nft]
Nftables::Rule[PREROUTING6-type] contains Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type_header]
Concat::Fragment[nftables-ip6-nat-header] contains Concat_fragment[nftables-ip6-nat-header]
Class[Nftables::Inet_filter] contains Nftables::Rule[OUTPUT-log_discarded]
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-all] contains Concat_fragment[nftables-inet-filter-chain-default_out-rule-all]
Stage[main] contains Class[Puppet_agent::Configure]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop]
Stage[main] contains Class[Nftables::Rules::Mdns]
Class[Nftables::Inet_filter] contains Nftables::Chain[default_fwd]
Class[Puppet_agent::Configure] contains Ini_setting[puppet-agent-splaylimit]
Class[Nftables::Inet_filter::In_out_conntrack] contains Nftables::Rule[OUTPUT-accept_established_related]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[POSTROUTING-docker]
Nftables::Chain[DOCKER_ISOLATION_STAGE_2] contains File[/etc/nftables/puppet/inet-filter-chain-DOCKER_ISOLATION_STAGE_2.nft]
Class[Timezone] contains File[/etc/localtime]
Class[Nftables::Inet_filter::In_out_conntrack] contains Nftables::Rule[INPUT-accept_established_related]
Package[dphys-swapfile] required-by File[/etc/dphys-swapfile]
Stage[main] contains Class[Puppet_agent::Install]
Kmod::Setting[kmod::install algif_aead] contains Augeas[kmod::setting kmod::install algif_aead algif_aead]
Nftables::Chain[INPUT-nat] contains Concat::Fragment[nftables-ip-nat-chain-INPUT-footer]
Nftables::Chain[INPUT] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-footer]
Stage[main] contains Class[Profile::Gitlab]
Nftables::Rule[OUTPUT-jump_default_out] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out]
Exec[nft validate] before File[/etc/nftables/puppet/ip6-nat.nft]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist 8192cu 8192cu]
Class[Profile::Users::Robert] contains File[/home/robert/.bashrc.d]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[main/app_management]
Nftables::Chain[POSTROUTING6] contains Concat[nftables-ip6-nat-chain-POSTROUTING6]
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-header] contains Concat_fragment[nftables-ip-nat-chain-PREROUTING-header]
Stage[main] contains Class[Puppet_agent::Osfamily::Debian]
Stage[main] contains Class[Puppet_agent]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-reject] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-reject]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[/pluginsync]
Class[Os_patching] contains File[/var/cache/os_patching]
Nftables::Chain[POSTROUTING6] contains Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-header]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4_header]
Apt::Source[docker] contains Apt::Keyring[docker.asc]
Nftables::Rule[FORWARD-reject] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-reject]
Sysctl[vm.swappiness] contains Exec[update-sysctl.conf-vm.swappiness]
Class[Kmod] contains Kmod::Blacklist[l2tp_eth]
Concat[nftables-inet-filter-chain-FORWARD] contains Concat_file[nftables-inet-filter-chain-FORWARD]
Stage[main] contains Class[Vim]
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpc] contains Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcpc]
Stage[main] contains Class[Gitlab::Install]
Nftables::Rule[POSTROUTING-docker] contains Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[default_fwd-idocker_odocker_accept]
Apt::Source[openvox8-release] contains Apt::Setting[sources-openvox8-release]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[/trusted_server_facts]
Nftables::Chain[PREROUTING] contains Concat::Fragment[nftables-ip-nat-chain-PREROUTING-header]
Class[Systemd::Journald] contains Service[systemd-journald]
Class[Puppet_agent] contains Class[Puppet_agent::Install]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-type] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-type]
Class[Profile::Users::Root] contains File[/root/.bashrc.d/bashrc_root_prompt]
Class[Os_patching] contains Cron[Cache patching data]
Package[nftables] before Concat[nftables-ip-nat]
Nftables::Rule[OUTPUT-jump_global] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global_header]
Concat::Fragment[nftables-inet-filter-body] contains Concat_fragment[nftables-inet-filter-body]
Stage[setup_app] before Stage[deploy_app]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-policy_header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-policy_header]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k_header]
Nftables::Chain[default_in] contains Concat::Fragment[nftables-inet-filter-chain-default_in-header]
Package[tzdata] before File[/etc/localtime]
Nftables::Chain[INPUT] contains Concat[nftables-inet-filter-chain-INPUT]
Kmod::Setting[kmod::install algif_aead] contains File[/etc/modprobe.d/algif_aead.conf]
Nftables::Rule[default_in-drop_incoming_to_udp_1900] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900_header]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-header] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-header]
Concat[nftables-inet-filter-chain-DOCKER_USER] contains Concat_file[nftables-inet-filter-chain-DOCKER_USER]
Nftables::Chain[POSTROUTING6] contains Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-footer]
Stage[main] contains Class[Docker::Config]
Nftables::Rule[default_in-http] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-http]
Class[Nftables::Ip_nat] contains Nftables::Rule[POSTROUTING-type]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related_header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related_header]
Docker::Run[pihole] contains Service[docker-pihole]
Concat::Fragment[nftables-ip-nat-chain-DOCKER-footer] contains Concat_fragment[nftables-ip-nat-chain-DOCKER-footer]
Stage[main] contains Class[Profile::Users::Robert]
Nftables::Chain[FORWARD] contains Concat[nftables-inet-filter-chain-FORWARD]
Sysctl[net.ipv4.ip_forward] contains Exec[sysctl-net.ipv4.ip_forward]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist tipc_diag tipc_diag]
Class[Apt::Update] contains Exec[apt_update]
Class[Os_patching] contains Exec[os_patching::exec::fact]
Stage[main] contains Class[Sysctl::Base]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621]
File[sources.list.d] notifies Class[Apt::Update]
Systemd::Dropin_file[puppet_nft.conf] contains Systemd::Daemon_reload[nftables.service]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[master/pluginsync]
Nftables::Rule[INPUT-lo] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-lo]
Nftables::Chain[OUTPUT-nat] contains Concat::Fragment[nftables-ip-nat-chain-OUTPUT-header]
Class[Nftables::Inet_filter] contains Nftables::Chain[INPUT]
Concat[nftables-inet-filter-chain-DOCKER] contains Concat_file[nftables-inet-filter-chain-DOCKER]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[DOCKER_ISOLATION_STAGE_2-drop]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900_header]
Systemd::Unit_file[collect-packages-facts.service] contains File[/etc/systemd/system/collect-packages-facts.service]
Stage[main] contains Class[Profile::Modemmanager]
Nftables::Rule[default_in-ssh] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh_header]
Class[Sudo::Package] before File[/etc/sudoers.d]
Nftables::Rule[default_fwd-jump_docker_isolation_stage_1] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-http_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-http_header]
Profile::User_type[robert] contains Ssh_authorized_key[robert_robertstuart@um790]
Nftables::Rule[POSTROUTING-type] contains Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-type]
Class[Nftables::Inet_filter] contains Nftables::Config[inet-filter]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1_header] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1_header]
Nftables::Rule[FORWARD-type] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-type_header]
File[/etc/apt/sources.list.d/raspi.sources] notifies Class[Apt::Update]
Nftables::Rule[default_in-dhcpv6_client] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client_header]
Concat::Fragment[nftables-ip-nat-chain-INPUT-footer] contains Concat_fragment[nftables-ip-nat-chain-INPUT-footer]
Nftables::Chain[default_out] contains Concat[nftables-inet-filter-chain-default_out]
Nftables::Rule[default_in-mdns_v4] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4_header]
Class[Docker] contains Class[Docker::Repos]
Nftables::Rule[default_fwd-jump_docker_isolation_stage_1] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1_header]
Nftables::Rule[OUTPUT-jump_docker@ip-nat] contains Concat::Fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker]
Stage[main] contains Class[Profile::Hardware]
Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1] contains Concat_file[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[default_fwd-out_docker_accept]
Class[Ssh::Server::Config] required-by Service[ssh]
Class[Nftables::Rules::Wireguard] contains Nftables::Rule[default_in-wireguard]
File[/etc/sysctl.d/vm.swappiness.conf] notifies Exec[sysctl-vm.swappiness]
Class[Ssh::Server::Install] before Class[Ssh::Server::Config]
Systemd::Manage_unit[collect-packages-facts.service] before Systemd::Manage_unit[collect-packages-facts.timer]
Class[Gitlab] required-by Service[gitlab-runsvdir.service]
Kmod::Blacklist[tipc_diag] contains Kmod::Setting[kmod::blacklist tipc_diag]
Docker::Run[pihole] contains File[/usr/local/bin/docker-run-pihole-start.sh]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000_header]
Exec[nft validate] before File[/etc/nftables/puppet/ip-nat.nft]
Nftables::Rule[POSTROUTING-type] contains Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-type_header]
Concat[nftables-ip6-nat] contains Concat_file[nftables-ip6-nat]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[agent/ignorecache]
Class[Profile::Docker] contains Apt::Source[docker]
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4_header] contains Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4_header]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-policy] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-policy]
Systemd::Timer_wrapper[collect-packages-facts] contains Systemd::Manage_unit[collect-packages-facts.service]
Nftables::Rule[default_in-http] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-http_header]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept_header] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept_header]
Nftables::Rule[default_fwd-out_docker_accept] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept_header]
Concat::Fragment[nftables-ip-nat-chain-DOCKER-rule-counter] contains Concat_fragment[nftables-ip-nat-chain-DOCKER-rule-counter]
File[preferences] notifies Class[Apt::Update]
Stage[main] before Stage[patch_reboot]
Class[Nftables::Inet_filter] contains Nftables::Rule[OUTPUT-reject]
Class[Nftables::Inet_filter] contains Nftables::Rule[FORWARD-log_discarded]
Nftables::Rule[OUTPUT-lo] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-lo]
Stage[main] contains Class[Gitlab::Host_config]
Class[Docker] contains Class[Docker::Install]
Stage[main] contains Class[Nftables::Ip_nat]
Concat[nftables-inet-filter-chain-INPUT] notifies Exec[nft validate]
Nftables::Rule[default_in-dhcp_ipv4] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[agent/ignorecache]
Systemd::Dropin_file[puppet_nft.conf] contains File[/etc/systemd/system/nftables.service.d/puppet_nft.conf]
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-docker_header] contains Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-docker_header]
Systemd::Dropin_file[puppet_nft.conf] contains File[/etc/systemd/system/nftables.service.d]
Nftables::Chain[default_in] contains Concat[nftables-inet-filter-chain-default_in]
Class[Kmod] contains File[/etc/modprobe.d/blacklist.conf]
Stage[setup_infra] before Stage[deploy_infra]
Kmod::Blacklist[floppy] contains Kmod::Setting[kmod::blacklist floppy]
Nftables::Rule[default_fwd-jump_docker] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_header]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_header] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_header]
Nftables::Chain[global] contains Concat::Fragment[nftables-inet-filter-chain-global-header]
Nftables::Config[ip6-nat] contains Concat::Fragment[nftables-ip6-nat-body]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k]
Stage[main] contains Class[Dnsclient]
Nftables::Chain[PREROUTING6] contains Concat[nftables-ip6-nat-chain-PREROUTING6]
Stage[main] contains Class[Nftables::Rules::Https]
Concat[nftables-ip-nat-chain-POSTROUTING] notifies Exec[nft validate]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900_header]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-DOCKER_ISOLATION_STAGE_2.nft]
File[/usr/local/bin/docker-run-pihole-start.sh] required-by Exec[docker-pihole-systemd-reload]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist algif_aead algif_aead]
File[keyrings] notifies Class[Apt::Update]
File[/usr/local/bin/docker-run-pihole-start.sh] subscription-of Exec[docker-pihole-systemd-reload]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899]
Nftables::Config[ip6-nat] contains Concat::Fragment[nftables-ip6-nat-footer]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[main/app_management]
Class[Kmod] contains File[/etc/modprobe.d]
Concat[nftables-inet-filter-chain-FORWARD] notifies Exec[nft validate]
Class[Kmod] contains Kmod::Blacklist[l2tp_netlink]
Stage[main] contains Class[Profile::Base::Dns]
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-docker] contains Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-docker]
Class[Profile::Users::Robert] contains File[/home/robert/.bashrc.d/bashrc_user_prompt]
Concat[nftables-inet-filter-chain-default_out] contains Concat_file[nftables-inet-filter-chain-default_out]
Class[Profile::Motd] contains File[/etc/motd]
Nftables::Rule[FORWARD-jump_default_fwd] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd]
Class[Puppet_agent::Prepare] contains Class[Puppet_agent::Osfamily::Debian]
Nftables::Chain[DOCKER_USER] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-header]
Class[Profile::Pihole] contains Docker::Run[pihole]
Stage[main] contains Class[Gitlab::Omnibus_package_repository]
Class[main] contains Filebucket[main]
Stage[main] contains Class[Gitlab::Omnibus_config]
Concat[nftables-ip6-nat-chain-POSTROUTING6] contains Concat_file[nftables-ip6-nat-chain-POSTROUTING6]
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker_header] contains Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-docker_header]
Nftables::Chain[OUTPUT-nat] contains Concat[nftables-ip-nat-chain-OUTPUT]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-header] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_USER-header]
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy] contains Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy]
Nftables::Rule[INPUT-policy] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-policy]
Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1] notifies Exec[nft validate]
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-header] contains Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-header]
Apt::Source[gitlab_official_ee] contains Apt::Keyring[gitlab_ee.asc]
Class[Nftables::Rules::Docker_ce] contains Nftables::Chain[OUTPUT-nat]
Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-policy_header] contains Concat_fragment[nftables-ip-nat-chain-INPUT-rule-policy_header]
File[/usr/local/bin/os_patching_fact_generation.sh] notifies Exec[os_patching::exec::fact]
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-footer] contains Concat_fragment[nftables-ip-nat-chain-PREROUTING-footer]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[master/app_management]
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy_header] contains Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy_header]
Class[Kmod] contains Kmod::Blacklist[l2tp_ip6]
Apt::Source[gitlab_official_ee] before Class[Gitlab::Install]
Class[Puppet_agent::Configure] contains Ini_setting[puppet-agent-runinterval]
Class[Profile::Pihole] contains File[/var/lib/pihole/data]
Nftables::Chain[POSTROUTING6] contains File[/etc/nftables/puppet/ip6-nat-chain-POSTROUTING6.nft]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out_header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_default_out_header]
Nftables::Rule[DOCKER_ISOLATION_STAGE_2-counter] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter.nft]
Stage[main] contains Class[Puppet_agent::Service]
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-footer] contains Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-footer]
Class[Nftables::Inet_filter] contains Nftables::Rule[FORWARD-policy]
Class[Nftables::Inet_filter] contains Nftables::Rule[INPUT-reject]
Kmod::Setting[kmod::blacklist sctp_diag] contains Augeas[kmod::setting kmod::blacklist sctp_diag sctp_diag]
Nftables::Rule[default_fwd-jump_docker_user] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-policy] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-policy]
Nftables::Rule[INPUT-jump_default_in] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept_header] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept_header]
Profile::User_type[robert] contains Ssh_authorized_key[robert_robert@keep_ed25519]
Class[Gitlab::Install] before Class[Gitlab::Service]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp_header]
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type] contains Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type]
Concat[nftables-inet-filter-chain-DOCKER] notifies Exec[nft validate]
Nftables::Rule[OUTPUT-log_discarded] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global_header] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global_header]
Exec[docker-pihole-systemd-reload] before Service[docker-pihole]
Nftables::Rule[default_in-ssh] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh]
Class[Timezone] contains File[/etc/timezone]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global_header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-jump_global_header]
Class[Gitlab::Omnibus_config] contains File[/etc/gitlab/gitlab.rb]
Package[nftables] required-by Concat[nftables-inet-filter-chain-DOCKER_USER]
Nftables::Rule[default_in-dhcp_ipv4] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4_header]
Nftables::Rule[FORWARD-accept_established_related] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related]
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type_header] contains Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type_header]
Class[Ssh::Hostkeys] contains Sshkey[rpi5-b1.rjstuart.id.au_dsa]
Stage[main] contains Class[Ssh::Server::Service]
Kmod::Blacklist[8192cu] contains Kmod::Setting[kmod::blacklist 8192cu]
Stage[main] contains Class[Profile::Puppet_agent]
File[/var/cache/os_patching/reboot_override] required-by Exec[os_patching::exec::fact]
Apt::Keyring[gitlab_ce.asc] contains File[/etc/apt/keyrings/gitlab_ce.asc]
Concat::Fragment[nftables-ip-nat-chain-DOCKER-rule-counter_header] contains Concat_fragment[nftables-ip-nat-chain-DOCKER-rule-counter_header]
Class[Docker::Install] contains Package[docker]
Class[Patching_as_code] contains File[/etc/puppetlabs/puppet/patching_unsafe_processes]
Stage[main] required-by Stage[runtime]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[/app_management]
Stage[main] contains Class[Docker::Repos]
Class[Sudo] contains File[/etc/sudoers]
Profile::User_type[robert] contains User[robert]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-wireguard] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-wireguard]
Concat::Fragment[nftables-inet-filter-header] contains Concat_fragment[nftables-inet-filter-header]
File[/etc/nftables/puppet/inet-filter-chain-INPUT.nft] notifies Service[nftables]
Concat[nftables-inet-filter] contains Concat_file[nftables-inet-filter]
Kmod::Blacklist[sctp_diag] contains Kmod::Setting[kmod::blacklist sctp_diag]
Nftables::Config[ip6-nat] contains Concat::Fragment[nftables-ip6-nat-header]
Nftables::Chain[OUTPUT] contains Concat[nftables-inet-filter-chain-OUTPUT]
Class[Profile::Pihole] contains Nftables::Rule[default_in-allow_web_10k]
Nftables::Rule[default_in-dns_udp] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_udp_header]
Stage[main] contains Class[Puppet_agent::Params]
Kmod::Option[rfkill] contains Kmod::Setting[kmod::option rfkill]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-DOCKER_ISOLATION_STAGE_1.nft]
Nftables::Chain[global] contains Concat[nftables-inet-filter-chain-global]
Nftables::Rule[POSTROUTING6-policy] contains Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-policy_header]
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type_header] contains Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-rule-type_header]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-type_header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-type_header]
Class[Nftables::Ip_nat] contains Nftables::Config[ip-nat]
Class[Docker::Service] contains File[/etc/default/docker-storage]
Concat[nftables-ip-nat-chain-OUTPUT] notifies Exec[nft validate]
Kmod::Setting[kmod::blacklist pcspkr] contains Augeas[kmod::setting kmod::blacklist pcspkr pcspkr]
Nftables::Rule[INPUT-lo] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-lo_header]
Nftables::Chain[INPUT-nat] contains Concat::Fragment[nftables-ip-nat-chain-INPUT-header]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[default_fwd-jump_docker]
File[/etc/apt/auth.conf] notifies Class[Apt::Update]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-footer] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-footer]
Nftables::Rule[default_in-mdns_v4] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v4]
Nftables::Rule[default_in-allow_incoming_to_udp_1900] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900_header]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_isolation_stage_1]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in_header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in_header]
Docker::Run[pihole] contains Exec[docker-pihole-systemd-reload]
Kmod::Setting[kmod::option rfkill] contains File[/etc/modprobe.d/rfkill.conf]
Class[Profile::Puppet_agent] contains Apt::Source[openvox8-release]
Nftables::Rule[OUTPUT-type] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-type_header]
Stage[main] contains Class[Nftables::Rules::Out::Dhcpv6_client]
Nftables::Chain[POSTROUTING] contains Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-header]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter_header] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-counter_header]
File[keyrings] required-by File[/etc/apt/keyrings/docker.asc]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899_header]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022]
Nftables::Rule[default_in-drop_broadcast_to_udp_6667] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_6667_header]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[default_fwd-jump_docker_isolation_stage_1]
Concat[nftables-inet-filter-chain-default_in] notifies Exec[nft validate]
Concat[nftables-inet-filter-chain-global] notifies Exec[nft validate]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_incoming_to_udp_1900]
Stage[main] contains Class[Gitlab::Backup]
Concat::Fragment[nftables-inet-filter-chain-default_in-header] contains Concat_fragment[nftables-inet-filter-chain-default_in-header]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded_header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded_header]
Class[Nftables::Rules::Dns] contains Nftables::Rule[default_in-dns_udp]
Stage[deploy_infra] before Stage[setup_app]
File[/etc/nftables/puppet/inet-filter-chain-default_out.nft] notifies Service[nftables]
Class[Profile::Users::Root] contains File[/root/.vimrc]
Nftables::Rule[default_in-dns_tcp] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp_header]
File[/etc/default/docker] notifies Service[docker]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist l2tp_ppp l2tp_ppp]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[OUTPUT-jump_docker@ip-nat]
Nftables::Rule[DOCKER-counter] contains Concat::Fragment[nftables-ip-nat-chain-DOCKER-rule-counter_header]
Stage[main] contains Class[Nftables::Rules::Dns]
Nftables::Rule[INPUT-jump_default_in] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in_header]
Nftables::Rule[DOCKER_USER-counter] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_USER-rule-counter_header]
Nftables::Rule[default_in-drop_broadcast_to_udp_38899] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_38899]
Nftables::Rule[PREROUTING-docker] contains Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-docker_header]
Nftables::Rule[FORWARD-jump_global] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global_header]
Concat[nftables-ip-nat-chain-INPUT] notifies Exec[nft validate]
Nftables::Rule[FORWARD-log_discarded] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded]
Class[Puppet_agent] contains Class[Puppet_agent::Configure]
Nftables::Chain[DOCKER] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER-header]
File[/etc/systemd/system/docker.service.d/service-overrides.conf] before Service[docker]
Stage[main] contains Class[Sudo::Package]
Stage[main] contains Class[Profile::Dphys_swap]
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-type_header] contains Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-type_header]
Stage[main] contains Class[Profile::Packages]
Nftables::Chain[INPUT] contains File[/etc/nftables/puppet/inet-filter-chain-INPUT.nft]
Nftables::Config[inet-filter] contains Concat::Fragment[nftables-inet-filter-body]
Stage[main] contains Class[Profile::Base::Time]
Kmod::Blacklist[l2tp_ip6] contains Kmod::Setting[kmod::blacklist l2tp_ip6]
Nftables::Config[ip-nat] contains File[/etc/nftables/puppet/ip-nat.nft]
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-rule-type_header] contains Concat_fragment[nftables-ip-nat-chain-POSTROUTING-rule-type_header]
Class[Profile::Users::Root] contains File[/root/.bashrc]
Nftables::Rule[OUTPUT-type] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-type]
Stage[main] contains Class[Timezone]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[main/trusted_server_facts]
Nftables::Rule[default_in-accept_icmp] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp_header]
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-footer] contains Concat_fragment[nftables-ip-nat-chain-POSTROUTING-footer]
Package[nftables] required-by Concat[nftables-ip-nat-chain-POSTROUTING]
Nftables::Chain[POSTROUTING] contains File[/etc/nftables/puppet/ip-nat-chain-POSTROUTING.nft]
Package[nftables] required-by Concat[nftables-ip-nat-chain-INPUT]
Nftables::Rule[INPUT-reject] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-reject_header]
Stage[main] contains Class[Kmod]
Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type] contains Concat_fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type]
Stage[main] contains Class[Stdlib]
Concat::Fragment[nftables-ip-nat-chain-DOCKER-header] contains Concat_fragment[nftables-ip-nat-chain-DOCKER-header]
Kmod::Setting[kmod::blacklist l2tp_eth] contains Augeas[kmod::setting kmod::blacklist l2tp_eth l2tp_eth]
Class[Nftables::Inet_filter] contains Nftables::Chain[FORWARD]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist sctp_diag sctp_diag]
Class[Puppet_agent::Prepare] contains Class[Puppet_agent::Prepare::Puppet_config]
Class[Profile::Users::Robert] contains Profile::User_type[robert]
Class[Nftables::Ip_nat] contains Nftables::Chain[PREROUTING6]
Concat[nftables-inet-filter-chain-default_out] notifies Exec[nft validate]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[agent/pluginsync]
Nftables::Rule[INPUT-type@ip-nat] contains Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-type]
Class[Docker::Config] before Class[Docker::Service]
Concat::Fragment[nftables-inet-filter-chain-DOCKER-footer] contains Concat_fragment[nftables-inet-filter-chain-DOCKER-footer]
Nftables::Rule[OUTPUT-jump_docker@ip-nat] contains Concat::Fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker_header]
Package[vim-nox] required-by Exec[update-alternatives --set editor /usr/bin/vim.nox]
Class[Kmod] contains Kmod::Option[rfkill]
Package[nftables] required-by Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2]
Class[Sudo::Package] contains Package[sudo]
Class[Nftables::Rules::Docker_ce] contains Nftables::Chain[DOCKER_USER]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-policy_header] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-policy_header]
Class[Nftables::Inet_filter] contains Nftables::Rule[FORWARD-reject]
Nftables::Chain[FORWARD] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-footer]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept]
Nftables::Chain[DOCKER] contains File[/etc/nftables/puppet/inet-filter-chain-DOCKER.nft]
Nftables::Chain[DOCKER_USER] contains Concat[nftables-inet-filter-chain-DOCKER_USER]
Nftables::Rule[default_in-wireguard] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-wireguard]
Class[Vim] contains File[/etc/vim/vimrc]
Nftables::Rule[INPUT-policy] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-policy_header]
Stage[main] contains Class[Role::Gitlab_server]
Package[nftables] required-by Concat[nftables-inet-filter-chain-default_fwd]
File[/etc/nftables/puppet/ip6-nat-chain-POSTROUTING6.nft] notifies Service[nftables]
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpc_header] contains Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcpc_header]
Class[Profile::Users::Root] contains File[/root/.bash_logout]
Systemd::Timer_wrapper[collect-packages-facts] contains Service[collect-packages-facts.timer]
File[/etc/nftables/puppet/ip-nat-chain-INPUT.nft] notifies Service[nftables]
Nftables::Chain[default_fwd] contains Concat[nftables-inet-filter-chain-default_fwd]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-lo] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-lo]
Class[Kmod] contains Kmod::Blacklist[algif_aead]
Nftables::Rule[POSTROUTING6-type] contains Concat::Fragment[nftables-ip6-nat-chain-POSTROUTING6-rule-type]
Nftables::Chain[INPUT-nat] contains File[/etc/nftables/puppet/ip-nat-chain-INPUT.nft]
Stage[main] contains Class[Os_patching]
Stage[main] contains Class[Nftables::Inet_filter::Fwd_conntrack]
Nftables::Rule[PREROUTING-type] contains Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-type]
Docker::Run[pihole] contains File[/usr/local/bin/docker-run-pihole-stop.sh]
Sysctl[vm.swappiness] contains Exec[enforce-sysctl-value-vm.swappiness]
Kmod::Blacklist[sctp] contains Kmod::Setting[kmod::blacklist sctp]
Class[Nftables::Rules::Dhcpv6_client] contains Nftables::Rule[default_in-dhcpv6_client]
Class[Nftables::Ip_nat] contains Nftables::Rule[PREROUTING-policy]
Class[Puppet_agent::Prepare::Puppet_config] before Class[Puppet_agent::Osfamily::Debian]
Nftables::Config[inet-filter] contains Concat::Fragment[nftables-inet-filter-header]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter_header] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter_header]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-lo_header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-lo_header]
Class[Nftables::Rules::Out::Dhcpv6_client] contains Nftables::Rule[default_out-dhcpv6_client]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded]
File[/etc/nftables/puppet-preflight.nft] notifies Exec[nft validate]
File[/etc/apt/sources.list.d/gitlab_official_ee.list] notifies Class[Apt::Update]
Concat[nftables-ip6-nat-chain-PREROUTING6] notifies Exec[nft validate]
Class[Profile::Users::Robert] contains File[/home/robert/.vimrc]
Nftables::Rule[default_out-dhcp_ipv4] contains Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4_header]
Exec[nft validate] before File[/etc/nftables/puppet]
Nftables::Chain[DOCKER_ISOLATION_STAGE_2] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-footer]
Class[Nftables::Inet_filter] contains Nftables::Rule[OUTPUT-jump_global]
Class[Nftables::Rules::Dns] contains Nftables::Rule[default_in-dns_tcp]
Stage[main] contains Class[Profile::Motd]
Apt::Keyring[docker.asc] before Apt::Setting[list-docker]
Nftables::Rule[OUTPUT-accept_established_related] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-accept_established_related]
Concat::Fragment[nftables-ip-nat-body] contains Concat_fragment[nftables-ip-nat-body]
Class[Puppet_agent::Prepare::Puppet_config] contains File[/etc/puppetlabs/puppet/puppet.conf]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-jump_global]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-dhcp_ipv4_header]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-accept_broadcast_to_udp_161_header]
Stage[main] contains Class[Docker::Service]
Nftables::Rule[INPUT-accept_established_related] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related]
Nftables::Chain[OUTPUT-nat] contains File[/etc/nftables/puppet/ip-nat-chain-OUTPUT.nft]
Stage[main] contains Class[Nftables::Bridges]
File[/etc/nftables/puppet-preflight] notifies Exec[nft validate]
Nftables::Chain[DOCKER_ISOLATION_STAGE_2] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-header]
Profile::User_type[robert] contains Ssh_authorized_key[robert_robert@um790]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist l2tp_netlink l2tp_netlink]
Nftables::Rule[PREROUTING-policy] contains Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-policy]
Class[Os_patching] contains File[/var/cache/os_patching/block_patching_on_warnings]
Nftables::Rule[OUTPUT-log_discarded] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded_header]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp]
Class[Kmod] contains File[/etc/modprobe.d/modprobe.conf]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[main/pluginsync]
Kmod::Setting[kmod::blacklist tipc_diag] contains Augeas[kmod::setting kmod::blacklist tipc_diag tipc_diag]
Class[Nftables::Rules::Docker_ce] contains Nftables::Chain[INPUT-nat]
Sysctl[net.ipv4.ip_forward] contains Exec[update-sysctl.conf-net.ipv4.ip_forward]
Class[Docker] contains Class[Docker::Service]
Class[Os_patching] contains File[/var/cache/os_patching/blackout_windows]
Nftables::Config[inet-filter] contains Concat::Fragment[nftables-inet-filter-footer]
Class[Nftables::Inet_filter] contains Nftables::Rule[FORWARD-type]
Concat::Fragment[nftables-inet-filter-chain-default_out-footer] contains Concat_fragment[nftables-inet-filter-chain-default_out-footer]
Nftables::Rule[default_out-dhcp_ipv4] contains Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4]
Nftables::Rule[INPUT-jump_global] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_global_header]
Systemd::Daemon_reload[nftables.service] before Service[nftables]
Package[nftables] required-by Concat[nftables-inet-filter-chain-default_in]
Nftables::Chain[PREROUTING6] contains Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-footer]
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy_header] contains Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy_header]
Class[Profile::Rpi] contains Apt::Source[raspi]
Concat[nftables-ip6-nat-chain-PREROUTING6] contains Concat_file[nftables-ip6-nat-chain-PREROUTING6]
Class[Profile::Users::Root] contains Ssh_authorized_key[root_robert@um790]
Nftables::Rule[default_in-ssh_2022] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022_header]
Class[Nftables::Rules::Icmp] contains Nftables::Rule[default_in-accept_icmp]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[DOCKER_ISOLATION_STAGE_1-counter]
File[/etc/nftables/puppet/ip6-nat.nft] notifies Service[nftables]
File[/usr/local/bin/os_patching_fact_generation.sh] required-by Cron[Cache patching data]
Concat::Fragment[nftables-ip-nat-chain-PREROUTING-rule-type] contains Concat_fragment[nftables-ip-nat-chain-PREROUTING-rule-type]
File[/etc/nftables] notifies Exec[nft validate]
Class[Kmod] contains Kmod::Blacklist[pcspkr]
Class[Nftables::Inet_filter] contains Nftables::Rule[FORWARD-jump_global]
Kmod::Setting[kmod::blacklist algif_aead] contains Augeas[kmod::setting kmod::blacklist algif_aead algif_aead]
Class[Vim] contains Package[vim-nox]
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4] contains Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcp_ipv4]
Apt::Source[docker] notifies Exec[apt_update]
Class[Gitlab::Omnibus_package_repository] contains Apt::Source[gitlab_official_ce]
Profile::User_type[robert] contains File[/home/robert/.profile]
Class[Ssh::Server::Config] contains Concat::Fragment[global config]
Class[Docker::Service] contains File[/etc/default/docker]
Nftables::Rule[default_in-drop_udp_137_138] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138]
File[/etc/systemd/system/nftables.service.d/puppet_nft.conf] notifies Systemd::Daemon_reload[nftables.service]
Sudo::Conf[robert_to_root] contains Exec[sudo-syntax-check for file /etc/sudoers.d/10_robert_to_root]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-dns_tcp_header]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_global] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-jump_global]
Class[Docker::Install] before Class[Docker::Config]
Systemd::Dropin_file[puppet_nft.conf] notifies Service[nftables]
Systemd::Unit_file[collect-packages-facts.service] contains Systemd::Daemon_reload[collect-packages-facts.service]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-dhcpv6_client]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related]
Nftables::Rule[default_fwd-idocker_onot_accept] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_onot_accept_header]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-type_header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-type_header]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[master/configtimeout]
Apt::Setting[list-gitlab_official_ce] contains File[/etc/apt/sources.list.d/gitlab_official_ce.list]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-footer] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-footer]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138_header]
Class[Gitlab::Host_config] contains File[/etc/gitlab]
Nftables::Chain[POSTROUTING] contains Concat[nftables-ip-nat-chain-POSTROUTING]
Nftables::Chain[DOCKER_ISOLATION_STAGE_1] contains File[/etc/nftables/puppet/inet-filter-chain-DOCKER_ISOLATION_STAGE_1.nft]
Class[Nftables::Rules::Out::Dhcp] contains Nftables::Rule[default_out-dhcpc]
Concat[/etc/ssh/sshd_config] notifies Service[ssh]
Stage[main] contains Class[Docker::Systemd_reload]
Class[Sudo::Package] before File[/etc/sudoers]
Concat::Fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker_header] contains Concat_fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker_header]
Nftables::Config[ip-nat] contains Concat::Fragment[nftables-ip-nat-body]
Stage[main] contains Class[Docker::Install]
Stage[main] contains Class[Nftables::Inet_filter]
Nftables::Chain[global] contains Concat::Fragment[nftables-inet-filter-chain-global-footer]
Stage[main] contains Class[Profile::Docker]
File[/etc/sysctl.d/net.ipv4.ip_forward.conf] notifies Exec[update-sysctl.conf-net.ipv4.ip_forward]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related_header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-accept_established_related_header]
Stage[main] contains Class[Profile::Sudo]
Class[Gitlab::Host_config] contains File[/opt/gitlab-shell]
Class[Ssh::Server::Install] contains Package[openssh-server]
Class[Dnsclient] contains File[dnsclient_resolver_config_file]
Class[Nftables::Rules::Mdns] contains Nftables::Rule[default_in-mdns_v4]
Class[Puppet_agent::Prepare] contains File[/opt/puppetlabs]
Nftables::Rule[DOCKER_ISOLATION_STAGE_2-drop] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-drop_header]
Concat::Fragment[nftables-ip-nat-chain-OUTPUT-header] contains Concat_fragment[nftables-ip-nat-chain-OUTPUT-header]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[master/ignorecache]
Class[Nftables::Ip_nat] contains Nftables::Rule[POSTROUTING6-policy]
Nftables::Chain[default_out] contains Concat::Fragment[nftables-inet-filter-chain-default_out-footer]
Class[Ssh::Server] contains Class[Ssh::Server::Service]
Exec[nft validate] before File[/etc/nftables/puppet/ip-nat-chain-POSTROUTING.nft]
Nftables::Rule[FORWARD-type] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-type]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-allow_incoming_to_udp_1900]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded_header] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-log_discarded_header]
Apt::Source[gitlab_official_ce] before Class[Gitlab::Install]
Class[Apt::Update] before Class[Gitlab::Install]
Nftables::Config[inet-filter] contains File[/etc/nftables/puppet/inet-filter.nft]
Class[Gitlab] contains Class[Gitlab::Install]
Class[Gitlab::Host_config] contains File[/opt/gitlab-shell/authorized_keys]
Class[Os_patching] contains File[/var/cache/os_patching/pre_patching_command]
Package[nftables] required-by Concat[nftables-ip-nat-chain-PREROUTING]
Nftables::Rule[default_in-drop_broadcast_to_udp_20000] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_broadcast_to_udp_20000]
Nftables::Config[ip-nat] contains Concat[nftables-ip-nat]
Stage[pre] before Stage[main]
Nftables::Rule[DOCKER_ISOLATION_STAGE_2-counter] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-rule-counter_header]
Apt::Keyring[gitlab_ee.asc] before Apt::Setting[list-gitlab_official_ee]
Nftables::Rule[default_fwd-out_docker_accept] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-out_docker_accept]
Systemd::Unit_file[collect-packages-facts.timer] contains File[/etc/systemd/system/collect-packages-facts.timer]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-header] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-header]
Exec[nft validate] before File[/etc/nftables/puppet/ip-nat-chain-INPUT.nft]
Class[Puppet_agent::Install] contains Puppet_agent_end_run[present]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[master/pluginsync]
Concat[nftables-inet-filter-chain-OUTPUT] notifies Exec[nft validate]
File[/etc/modprobe.d/rfkill.conf] required-by Augeas[kmod::setting kmod::option rfkill rfkill]
File[/etc/dphys-swapfile] notifies Service[dphys-swapfile]
Class[Sudo] contains File[/etc/sudoers.d]
Stage[main] required-by Stage[after]
Apt::Keyring[gitlab_ee.asc] contains File[/etc/apt/keyrings/gitlab_ee.asc]
Stage[main] contains Class[Systemd::Timedatectl]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-policy] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-policy]
Class[Profile::Puppet_agent] contains Apt::Keyring[openvox-keyring.gpg]
Nftables::Chain[DOCKER_USER] contains File[/etc/nftables/puppet/inet-filter-chain-DOCKER_USER.nft]
Class[Puppet_agent::Configure] contains Ini_setting[puppet-agent-splay]
Concat::Fragment[nftables-inet-filter-chain-INPUT-footer] contains Concat_fragment[nftables-inet-filter-chain-INPUT-footer]
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-all_header] contains Concat_fragment[nftables-inet-filter-chain-default_out-rule-all_header]
Class[Nftables::Rules::Docker_ce] contains Nftables::Chain[DOCKER-nat]
Class[Puppet_agent::Service] contains Service[puppet]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-log_discarded]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[INPUT-type@ip-nat]
File[/etc/modprobe.d/algif_aead.conf] required-by Augeas[kmod::setting kmod::install algif_aead algif_aead]
File[/etc/sysctl.d/net.ipv4.ip_forward.conf] required-by Exec[sysctl-net.ipv4.ip_forward]
Exec[nft validate] before File[/etc/nftables/puppet/ip6-nat-chain-POSTROUTING6.nft]
Stage[main] contains Class[Nftables::Rules::Docker_ce]
Nftables::Chain[default_in] contains Concat::Fragment[nftables-inet-filter-chain-default_in-footer]
Class[Ssh::Hostkeys] contains Sshkey[rpi5-b1.rjstuart.id.au_rsa]
Stage[main] contains Class[Nftables::Rules::Dhcpv6_client]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-footer] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-footer]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-rule-iifname]
Nftables::Chain[OUTPUT] contains File[/etc/nftables/puppet/inet-filter-chain-OUTPUT.nft]
Class[Vim] contains Exec[update-alternatives --set editor /usr/bin/vim.nox]
File[/etc/systemd/system/docker-pihole.service] required-by Exec[docker-pihole-systemd-reload]
File[/etc/sysctl.d/vm.swappiness.conf] notifies Exec[update-sysctl.conf-vm.swappiness]
Nftables::Rule[INPUT-policy@ip-nat] contains Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-policy_header]
Nftables::Chain[PREROUTING6] contains File[/etc/nftables/puppet/ip6-nat-chain-PREROUTING6.nft]
File[/etc/nftables/puppet/inet-filter-chain-DOCKER.nft] notifies Service[nftables]
Class[Gitlab::Service] contains Exec[gitlab_reconfigure]
Apt::Keyring[gitlab_ce.asc] before Apt::Setting[list-gitlab_official_ce]
File[10_robert_to_root] notifies Exec[sudo-syntax-check for file /etc/sudoers.d/10_robert_to_root]
File[/etc/nftables/puppet/inet-filter-chain-default_fwd.nft] notifies Service[nftables]
Concat::Fragment[nftables-inet-filter-chain-default_out-header] contains Concat_fragment[nftables-inet-filter-chain-default_out-header]
File[/etc/nftables/puppet/ip-nat-chain-DOCKER.nft] notifies Service[nftables]
Nftables::Rule[FORWARD-reject] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-reject_header]
Apt::Setting[sources-raspi] contains File[/etc/apt/sources.list.d/raspi.sources]
Nftables::Chain[DOCKER_ISOLATION_STAGE_1] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-header]
Stage[main] contains Class[Profile::Base::Timezone]
Stage[main] contains Class[Sudo::Params]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-default_out.nft]
Nftables::Rule[OUTPUT-policy] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-policy]
Kmod::Setting[kmod::blacklist floppy] contains Augeas[kmod::setting kmod::blacklist floppy floppy]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-jump_default_in]
Nftables::Rule[default_out-all] contains Concat::Fragment[nftables-inet-filter-chain-default_out-rule-all_header]
Nftables::Rule[INPUT-type@ip-nat] contains Concat::Fragment[nftables-ip-nat-chain-INPUT-rule-type_header]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[agent/trusted_server_facts]
Kmod::Blacklist[algif_aead] contains Kmod::Setting[kmod::blacklist algif_aead]
Class[Gitlab] contains Class[Gitlab::Service]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-lo_header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-lo_header]
Class[Nftables::Inet_filter] contains Nftables::Rule[INPUT-type]
Nftables::Chain[INPUT-nat] contains Concat[nftables-ip-nat-chain-INPUT]
Concat[/etc/ssh/sshd_config] contains Concat_file[/etc/ssh/sshd_config]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[/pluginsync]
Exec[docker-systemd-reload-before-service] notifies Service[docker]
File[/etc/nftables/puppet/inet-filter-chain-global.nft] notifies Service[nftables]
File[/etc/systemd/system/docker-pihole.service] required-by Service[docker-pihole]
Docker::Run[pihole] contains File[/etc/systemd/system/docker-pihole.service]
Stage[main] contains Class[Puppet_agent::Prepare]
Nftables::Chain[DOCKER] contains Concat[nftables-inet-filter-chain-DOCKER]
Nftables::Chain[default_fwd] contains File[/etc/nftables/puppet/inet-filter-chain-default_fwd.nft]
Package[nftables] required-by Concat[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1]
Class[Os_patching] contains File[/usr/local/bin/os_patching_fact_generation.sh]
Nftables::Rule[default_in-ssh_2022] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh_2022]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[INPUT-policy@ip-nat]
Nftables::Rule[default_in-dns_udp] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-dns_udp]
Concat[nftables-inet-filter-chain-DOCKER_USER] notifies Exec[nft validate]
Class[Ssh::Server] contains Class[Ssh::Server::Config]
File[/usr/local/bin/docker-run-pihole-stop.sh] notifies Service[docker-pihole]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded]
Nftables::Rule[INPUT-type] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-type]
File[/etc/localtime] before File[/etc/timezone]
Nftables::Chain[PREROUTING6] contains Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-header]
Class[Docker::Service] contains File[/etc/systemd/system/docker.service.d]
Nftables::Rule[PREROUTING6-policy] contains Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy_header]
Kmod::Setting[kmod::blacklist l2tp_ppp] contains Augeas[kmod::setting kmod::blacklist l2tp_ppp l2tp_ppp]
Concat[nftables-inet-filter-chain-default_in] contains Concat_file[nftables-inet-filter-chain-default_in]
Stage[main] contains Class[Profile::Kmod]
Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-header] contains Concat_fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_2-header]
Concat::Fragment[nftables-inet-filter-chain-INPUT-header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-header]
File[/usr/local/bin/docker-run-pihole-start.sh] notifies Service[docker-pihole]
File[/var/cache/os_patching] required-by File[/var/cache/os_patching/blackout_windows]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd_header] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-jump_default_fwd_header]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[DOCKER_ISOLATION_STAGE_1-iifname]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user_header] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-jump_docker_user_header]
Kmod::Setting[kmod::blacklist l2tp_ip] contains Augeas[kmod::setting kmod::blacklist l2tp_ip l2tp_ip]
Nftables::Rule[default_in-allow_web_10k] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-allow_web_10k_header]
Stage[main] contains Class[Nftables::Rules::Ssh]
Concat::Fragment[nftables-inet-filter-footer] contains Concat_fragment[nftables-inet-filter-footer]
Concat::Fragment[nftables-ip-nat-header] contains Concat_fragment[nftables-ip-nat-header]
Profile::User_type[robert] contains Ssh_authorized_key[robert_robert@keep_rsa]
Class[Kmod] contains Kmod::Blacklist[l2tp_ppp]
File[/etc/nftables/puppet/inet-filter-chain-default_in.nft] notifies Service[nftables]
File[/etc/apt/sources.list.d/gitlab_official_ce.list] notifies Class[Apt::Update]
Class[Kmod] contains Kmod::Blacklist[tipc_diag]
Exec[nft validate] before File[/etc/nftables/puppet/inet-filter-chain-FORWARD.nft]
Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept_header] contains Concat_fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept_header]
Class[Nftables::Inet_filter] contains Nftables::Rule[INPUT-log_discarded]
Concat::Fragment[global config] contains Concat_fragment[global config]
Concat[nftables-ip-nat-chain-PREROUTING] contains Concat_file[nftables-ip-nat-chain-PREROUTING]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[/app_management]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[master/configtimeout]
Kmod::Blacklist[l2tp_ppp] contains Kmod::Setting[kmod::blacklist l2tp_ppp]
Class[Timezone] contains Exec[update_timezone]
Stage[main] contains Class[Globals]
Sysctl[net.ipv4.ip_forward] contains Exec[enforce-sysctl-value-net.ipv4.ip_forward]
Concat::Fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client] contains Concat_fragment[nftables-inet-filter-chain-default_out-rule-dhcpv6_client]
Apt::Source[docker] contains Apt::Setting[list-docker]
File[/etc/nftables.conf] before File[/etc/nftables]
Sysctl[vm.swappiness] contains File[/etc/sysctl.d/vm.swappiness.conf]
Concat::Fragment[nftables-ip6-nat-body] contains Concat_fragment[nftables-ip6-nat-body]
Concat[nftables-ip-nat] notifies Exec[nft validate]
Stage[main] contains Class[Profile::Users::Root]
Class[Kmod] contains Kmod::Blacklist[l2tp_ip]
Apt::Setting[list-docker] contains File[/etc/apt/sources.list.d/docker.list]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist l2tp_eth l2tp_eth]
Class[Os_patching] contains File[/var/cache/os_patching/patch_window]
Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-header] contains Concat_fragment[nftables-ip-nat-chain-POSTROUTING-header]
Class[Nftables::Ip_nat] contains Nftables::Rule[POSTROUTING-policy]
File[/home/robert] required-by Ssh_authorized_key[robert_robert@keep_ed25519]
Nftables::Rule[INPUT-log_discarded] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded]
Class[Ssh::Server] contains Class[Ssh::Server::Install]
Stage[main] contains Class[Profile::Ssh]
Stage[main] contains Class[Nftables::Rules::Out::Dhcp]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[master/trusted_server_facts]
Kmod::Setting[kmod::option rfkill] contains Augeas[kmod::setting kmod::option rfkill rfkill]
Nftables::Rule[default_in-https] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-https]
Class[Nftables::Rules::Docker_ce] contains Nftables::Rule[DOCKER_USER-counter]
Stage[main] contains Class[Sudo]
Nftables::Rule[FORWARD-policy] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-policy]
Concat::Fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy] contains Concat_fragment[nftables-ip6-nat-chain-PREROUTING6-rule-policy]
Concat::Fragment[nftables-inet-filter-chain-DOCKER-header] contains Concat_fragment[nftables-inet-filter-chain-DOCKER-header]
Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded_header] contains Concat_fragment[nftables-inet-filter-chain-INPUT-rule-log_discarded_header]
Nftables::Chain[POSTROUTING] contains Concat::Fragment[nftables-ip-nat-chain-POSTROUTING-footer]
Nftables::Chain[default_fwd] contains Nftables::Rule[FORWARD-jump_default_fwd]
Class[Nftables::Rules::Docker_ce] contains Nftables::Chain[DOCKER]
Concat::Fragment[nftables-ip-nat-chain-INPUT-header] contains Concat_fragment[nftables-ip-nat-chain-INPUT-header]
Class[Puppet_agent::Configure] contains Ini_setting[puppet-agent-environment]
Profile::User_type[robert] contains Sudo::Conf[robert_to_root]
Package[vim-nox] required-by File[/etc/vim/vimrc]
Class[Sysctl::Base] contains File[/etc/sysctl.d/99-sysctl.conf]
Class[Nftables::Ip_nat] contains Nftables::Chain[PREROUTING]
Class[Ssh::Server::Config] contains Concat[/etc/ssh/sshd_config]
Stage[main] contains Class[Sysctl::Params]
Nftables::Chain[default_out] contains Concat::Fragment[nftables-inet-filter-chain-default_out-header]
Profile::User_type[robert] contains File[/home/robert]
Class[Nftables::Rules::Http] contains Nftables::Rule[default_in-http]
Concat::Fragment[nftables-inet-filter-chain-default_in-rule-ssh_header] contains Concat_fragment[nftables-inet-filter-chain-default_in-rule-ssh_header]
Nftables::Rule[default_in-drop_udp_137_138] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_udp_137_138_header]
Class[Puppet_agent::Prepare] before Class[Puppet_agent::Install]
Sudo::Conf[robert_to_root] contains File[10_robert_to_root]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[master/ignorecache]
Nftables::Rule[default_fwd-idocker_odocker_accept] contains Concat::Fragment[nftables-inet-filter-chain-default_fwd-rule-idocker_odocker_accept]
Package[nftables] required-by Concat[nftables-inet-filter-chain-FORWARD]
File[/etc/puppetlabs/puppet/puppet.conf] required-by Ini_setting[main/configtimeout]
Class[Nftables::Ip_nat] contains Nftables::Rule[PREROUTING-type]
Stage[main] contains Class[Systemd::Journald]
Stage[main] contains Class[Vim::Params]
Class[Puppet_agent::Prepare::Puppet_config] contains Ini_setting[/configtimeout]
Stage[main] contains Class[Profile::Patching]
Stage[main] contains Class[Profile::Rpi]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist l2tp_ip6 l2tp_ip6]
Exec[nft validate] before File[/etc/nftables/puppet.nft]
Class[Profile::Dphys_swap] contains Service[dphys-swapfile]
Class[Puppet_agent] contains Class[Puppet_agent::Prepare]
Class[Gitlab::Omnibus_config] before Class[Gitlab::Install]
File[/etc/nftables/puppet/ip-nat-chain-PREROUTING.nft] notifies Service[nftables]
Class[Puppet_agent] contains Class[Puppet_agent::Service]
Nftables::Rule[default_in-mdns_v6] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-mdns_v6]
Nftables::Rule[default_in-drop_spotify_udp_57621] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-drop_spotify_udp_57621_header]
File[/etc/modprobe.d/blacklist.conf] required-by Augeas[kmod::setting kmod::blacklist l2tp_ip l2tp_ip]
Class[Nftables::Inet_filter] contains Nftables::Chain[OUTPUT]
Concat[nftables-inet-filter-chain-default_fwd] contains Concat_file[nftables-inet-filter-chain-default_fwd]
Nftables::Chain[DOCKER_ISOLATION_STAGE_1] contains Concat::Fragment[nftables-inet-filter-chain-DOCKER_ISOLATION_STAGE_1-footer]
Concat::Fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker] contains Concat_fragment[nftables-ip-nat-chain-OUTPUT-rule-jump_docker]
Class[Nftables::Inet_filter] contains Nftables::Rule[INPUT-lo]
Kmod::Install[algif_aead] contains Kmod::Setting[kmod::install algif_aead]
Nftables::Rule[default_in-accept_icmp] contains Concat::Fragment[nftables-inet-filter-chain-default_in-rule-accept_icmp]
Concat[nftables-ip-nat-chain-INPUT] contains Concat_file[nftables-ip-nat-chain-INPUT]
Class[Timezone] contains Package[tzdata]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related_header] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-accept_established_related_header]
Class[Patching_as_code] contains Anchor[patching_as_code::start]
Class[main] contains Schedule[Patching as Code - Patch Window]
Class[Patching_as_code] contains Anchor[patching_as_code::post]
Class[Patching_as_code] contains Reboot_if_pending[Patching as Code]
Class[Nftables] contains Nftables::Rule[default_in-dhcp_ipv4]
Class[Nftables::Inet_filter::Fwd_conntrack] contains Nftables::Rule[FORWARD-drop_invalid]
Class[Nftables::Inet_filter::In_out_conntrack] contains Nftables::Rule[OUTPUT-drop_invalid]
Class[Nftables::Inet_filter::In_out_conntrack] contains Nftables::Rule[INPUT-drop_invalid]
Class[Nftables] contains Nftables::Rule[default_in-drop_spotify_udp_57621]
Nftables::Rule[FORWARD-drop_invalid] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid_header]
Nftables::Rule[FORWARD-drop_invalid] contains Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid]
Stage[main] contains Class[Profile::Nftables]
Class[Profile::Nftables] contains Sysctl[net.netfilter.nf_conntrack_tcp_be_liberal]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid_header] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid_header]
Class[Nftables] contains Nftables::Rule[default_in-drop_incoming_to_udp_1900]
Class[Nftables] contains File[/etc/nftables/puppet]
Class[Nftables] contains File[/etc/nftables]
Nftables::Rule[INPUT-drop_invalid] contains Concat::Fragment[nftables-inet-filter-chain-INPUT-rule-drop_invalid]
Class[Nftables] contains Nftables::Rule[default_in-allow_incoming_to_udp_1900]
Class[Nftables] contains File[/etc/nftables.conf]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid]
Nftables::Rule[OUTPUT-drop_invalid] contains Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid_header]
Concat::Fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid_header] contains Concat_fragment[nftables-inet-filter-chain-OUTPUT-rule-drop_invalid_header]
Class[Nftables] contains Systemd::Dropin_file[puppet_nft.conf]
Class[Nftables] contains Service[nftables]
Concat::Fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid] contains Concat_fragment[nftables-inet-filter-chain-FORWARD-rule-drop_invalid]
Class[Nftables] contains Service[firewalld]
Class[Nftables] contains Nftables::Rule[default_in-drop_broadcast_to_udp_6667]
Class[Nftables] contains File[/etc/nftables/puppet-preflight.nft]
Sysctl[net.netfilter.nf_conntrack_tcp_be_liberal] contains Exec[update-sysctl.conf-net.netfilter.nf_conntrack_tcp_be_liberal]
File[/etc/sysctl.d/net.netfilter.nf_conntrack_tcp_be_liberal.conf] notifies Exec[sysctl-net.netfilter.nf_conntrack_tcp_be_liberal]
Sysctl[net.netfilter.nf_conntrack_tcp_be_liberal] contains Exec[sysctl-net.netfilter.nf_conntrack_tcp_be_liberal]
File[/etc/sysctl.d/net.netfilter.nf_conntrack_tcp_be_liberal.conf] required-by Exec[sysctl-net.netfilter.nf_conntrack_tcp_be_liberal]
Sysctl[net.netfilter.nf_conntrack_tcp_be_liberal] contains Exec[enforce-sysctl-value-net.netfilter.nf_conntrack_tcp_be_liberal]
File[/etc/sysctl.d/net.netfilter.nf_conntrack_tcp_be_liberal.conf] notifies Exec[update-sysctl.conf-net.netfilter.nf_conntrack_tcp_be_liberal]
Sysctl[net.netfilter.nf_conntrack_tcp_be_liberal] contains File[/etc/sysctl.d/net.netfilter.nf_conntrack_tcp_be_liberal.conf]
Class[Apt] contains File[auth.conf.d]
Class[Apt] contains File[keyrings]
Class[Apt] contains File[preferences.d]
Apt::Source[debian-security] contains Apt::Setting[sources-debian-security]
Class[Apt] contains Apt::Source[debian]
Class[Profile::Apt] contains Package[unattended-upgrades]
Apt::Setting[sources-debian-security] contains File[/etc/apt/sources.list.d/debian-security.sources]
Class[Profile::Apt] contains Package[debsecan]
Class[Apt] contains File[sources.list]
Class[Apt] contains File[sources.list.d]
Class[Apt] contains File[apt.conf.d]
Class[Apt] contains Package[gnupg]
Stage[main] contains Class[Apt]
Class[Profile::Apt] contains Package[apt-listchanges]
Class[Apt] contains Apt::Source[debian-security]
Class[Apt] contains Apt::Setting[conf-update-stamp]
Class[Apt] contains File[preferences]
Apt::Source[debian] contains Apt::Setting[sources-debian]
Apt::Setting[sources-debian] contains File[/etc/apt/sources.list.d/debian.sources]
Stage[main] contains Class[Profile::Apt]
Class[Apt] contains File[/etc/apt/auth.conf]
File[/etc/apt/sources.list.d/debian-security.sources] notifies Class[Apt::Update]
File[/etc/apt/sources.list.d/debian.sources] notifies Class[Apt::Update]
File[/etc/locale.conf] subscription-of Exec[update-locale]
Stage[main] contains Class[Locales]
Stage[main] contains Class[Locales::Params]
Class[Locales] contains Package[locales-all]
Package[locales-all] required-by Exec[locale-gen]
Class[Locales] contains File[/etc/locale.gen]
Class[Locales] contains Package[locales]
Stage[main] contains Class[Profile::Locales]
Class[Locales] contains File[/etc/locale.conf]
File[/etc/locale.gen] notifies Exec[locale-gen]
Package[locales-all] required-by File[/etc/locale.gen]
Class[Locales] contains Exec[locale-gen]
Package[locales] required-by File[/etc/locale.conf]
Class[Locales] contains File[/etc/default/locale]
Package[locales] required-by Exec[update-locale]
Class[Locales] contains Exec[update-locale]