new rules

manifests/rules/http.pp

+# manage incoming http
+class firewall::rules::http {
+  include firewall
+  if $firewall::use_nftables {
+    include nftables::rules::http
+  } else {
+    include shorewall::rules::http
+  }
+}

manifests/rules/https.pp

+# manage incoming https
+class firewall::rules::https {
+  include firewall
+  if $firewall::use_nftables {
+    include nftables::rules::https
+  } else {
+    include shorewall::rules::https
+  }
+}

manifests/rules/out/munin.pp

+# outgoing rules for munin
+class firewall::rules::out::munin {
+  include firewall
+  if $firewall::use_nftables {
+    nftables::simplerule {
+      'munin-out':
+        chain => 'default_out',
+        dport => '4949',
+    }
+  } else {
+    include shorewall::rules::out::munin
+  }
+}