set firewall ipv4 name client_to_dmz rule 1 action 'accept'
set firewall ipv4 name client_to_self rule 1 action 'return'
set firewall ipv4 name dmz_to_client rule 1 action 'accept'
set firewall ipv4 name dmz_to_self rule 1 action 'return'
set firewall ipv4 name self_to_client rule 1 action 'return'
set firewall ipv4 name self_to_dmz rule 1 action 'return'

set firewall zone client from dmz firewall name 'dmz_to_client'
set firewall zone client from self firewall name 'self_to_client'
set firewall zone client interface 'eth1'

set firewall zone dmz from client firewall name 'client_to_dmz'
set firewall zone dmz from self firewall name 'self_to_dmz'
set firewall zone dmz interface 'eth0'

set firewall zone self from dmz firewall name 'dmz_to_self'
set firewall zone self local-zone

set interfaces ethernet eth0 address '10.0.1.2/24'
set interfaces ethernet eth1 address '10.0.2.2/24'

set service https api keys id KEY key 'NOT_SECRET_KEY'
set service https listen-address '10.0.2.2'
set service https listen-address '10.0.1.2'
set system host-name 'secondary-fw'