control 'neo4j-debian' do
  only_if('Running on Debian') do
    os.debian?
  end

  packages = %w(
    lsof
    neo4j-enterprise
    openssl
    unzip
    zip
  )

  packages.each do |name|
    describe package(name) do
      it { should be_installed }
    end
  end
end

control 'firewall-debian' do
  only_if('Running on Debian') do
    os.debian?
  end

  describe iptables do
    it { should have_rule('-A ufw-user-input -p tcp -m tcp --dport 7687 -j ACCEPT') }
    it { should have_rule('-A ufw-user-input -p tcp -m tcp --dport 6362 -j ACCEPT') }
    it { should have_rule('-A ufw-user-input -p tcp -m tcp --dport 7688 -j ACCEPT') }
    it { should have_rule('-A ufw-user-input -p tcp -m multiport --dports 5000,6000,7000 -j ACCEPT') }
  end
end