pub mod pos;
pub struct RulesClient<T> {
client: T,
path: String,
}
impl<T> RulesClient<T>
where
T: crate::client::Client,
{
pub fn new(client: T, parent_path: &str) -> Self {
Self {
client,
path: format!("{}{}", parent_path, "/rules"),
}
}
}
impl<T> RulesClient<T>
where
T: crate::client::Client,
{
#[doc = "List rules."]
pub fn get(&self) -> Result<Vec<GetOutputItems>, T::Error> {
let path = self.path.to_string();
self.client.get(&path, &())
}
}
impl<T> RulesClient<T>
where
T: crate::client::Client,
{
#[doc = "Create new rule."]
pub fn post(&self, params: PostParams) -> Result<(), T::Error> {
let path = self.path.to_string();
self.client.post(&path, ¶ms)
}
}
impl GetOutputItems {
pub fn new(pos: u64) -> Self {
Self {
pos,
additional_properties: Default::default(),
}
}
}
#[derive(Clone, Debug, :: serde :: Serialize, :: serde :: Deserialize)]
pub struct GetOutputItems {
#[serde(
serialize_with = "crate::types::serialize_int",
deserialize_with = "crate::types::deserialize_int"
)]
pub pos: u64,
#[serde(
flatten,
default,
skip_serializing_if = "::std::collections::HashMap::is_empty"
)]
pub additional_properties: ::std::collections::HashMap<String, ::serde_json::Value>,
}
impl PostParams {
pub fn new(action: String, ty: Type) -> Self {
Self {
action,
ty,
comment: Default::default(),
dest: Default::default(),
digest: Default::default(),
dport: Default::default(),
enable: Default::default(),
icmp_type: Default::default(),
iface: Default::default(),
log: Default::default(),
macro_def: Default::default(),
pos: Default::default(),
proto: Default::default(),
source: Default::default(),
sport: Default::default(),
additional_properties: Default::default(),
}
}
}
#[derive(Clone, Debug, :: serde :: Serialize, :: serde :: Deserialize)]
pub struct PostParams {
#[doc = "Rule action ('ACCEPT', 'DROP', 'REJECT') or security group name."]
pub action: String,
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Descriptive comment."]
pub comment: Option<String>,
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Restrict packet destination address. This can refer to a single IP address, an IP set ('+ipsetname') or an IP alias definition. You can also specify an address range like '20.34.101.207-201.3.9.99', or a list of IP addresses and networks (entries are separated by comma). Please do not mix IPv4 and IPv6 addresses inside such lists."]
pub dest: Option<String>,
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Prevent changes if current configuration file has a different digest. This can be used to prevent concurrent modifications."]
pub digest: Option<String>,
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Restrict TCP/UDP destination port. You can use service names or simple numbers (0-65535), as defined in '/etc/services'. Port ranges can be specified with '\\d+:\\d+', for example '80:85', and you can use comma separated list to match several ports or ranges."]
pub dport: Option<String>,
#[serde(
serialize_with = "crate::types::serialize_int_optional",
deserialize_with = "crate::types::deserialize_int_optional"
)]
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Flag to enable/disable a rule."]
pub enable: Option<u64>,
#[serde(rename = "icmp-type")]
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Specify icmp-type. Only valid if proto equals 'icmp' or 'icmpv6'/'ipv6-icmp'."]
pub icmp_type: Option<String>,
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Network interface name. You have to use network configuration key names for VMs and containers ('net\\d+'). Host related rules can use arbitrary strings."]
pub iface: Option<String>,
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Log level for firewall rule."]
pub log: Option<Log>,
#[serde(rename = "macro")]
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Use predefined standard macro."]
pub macro_def: Option<String>,
#[serde(
serialize_with = "crate::types::serialize_int_optional",
deserialize_with = "crate::types::deserialize_int_optional"
)]
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Update rule at position \\<pos\\>."]
pub pos: Option<u64>,
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "IP protocol. You can use protocol names ('tcp'/'udp') or simple numbers, as defined in '/etc/protocols'."]
pub proto: Option<String>,
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Restrict packet source address. This can refer to a single IP address, an IP set ('+ipsetname') or an IP alias definition. You can also specify an address range like '20.34.101.207-201.3.9.99', or a list of IP addresses and networks (entries are separated by comma). Please do not mix IPv4 and IPv6 addresses inside such lists."]
pub source: Option<String>,
#[serde(skip_serializing_if = "Option::is_none", default)]
#[doc = "Restrict TCP/UDP source port. You can use service names or simple numbers (0-65535), as defined in '/etc/services'. Port ranges can be specified with '\\d+:\\d+', for example '80:85', and you can use comma separated list to match several ports or ranges."]
pub sport: Option<String>,
#[serde(rename = "type")]
#[doc = "Rule type."]
pub ty: Type,
#[serde(
flatten,
default,
skip_serializing_if = "::std::collections::HashMap::is_empty"
)]
pub additional_properties: ::std::collections::HashMap<String, ::serde_json::Value>,
}
#[derive(Clone, Debug, :: serde :: Serialize, :: serde :: Deserialize)]
pub enum Log {
#[serde(rename = "alert")]
Alert,
#[serde(rename = "crit")]
Crit,
#[serde(rename = "debug")]
Debug,
#[serde(rename = "emerg")]
Emerg,
#[serde(rename = "err")]
Err,
#[serde(rename = "info")]
Info,
#[serde(rename = "nolog")]
Nolog,
#[serde(rename = "notice")]
Notice,
#[serde(rename = "warning")]
Warning,
}
#[derive(Clone, Debug, :: serde :: Serialize, :: serde :: Deserialize)]
pub enum Type {
#[serde(rename = "group")]
Group,
#[serde(rename = "in")]
In,
#[serde(rename = "out")]
Out,
}
impl<T> RulesClient<T>
where
T: crate::client::Client,
{
pub fn pos(&self, pos: &str) -> pos::PosClient<T> {
pos::PosClient::<T>::new(self.client.clone(), &self.path, pos)
}
}