case $::osfamily {
  'RedHat': {
    $firewall = 'firewalld'
  }
  'Debian': {
    $firewall = 'ufw'
  }
  default: {
    fail("Module firewall does not support ${::osfamily}")
  }
}

# We rely on security groups
service { $firewall:
  ensure => stopped,
  enable =>  false,
}