confdroid/confdroid_haproxy
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity

OP#669 remove unwanted onio-api fw rule

Browse Source
This commit is contained in:
Arne Teuke
2026-09-05 12:50:53 +02:00
parent 83422e8563
commit 04e35b6d1d
4 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.vscode/settings.json vendored
View File

@@ -2,9 +2,11 @@
"cSpell.words": [ "cSpell.words": [
"dontlognull", "dontlognull",
"dport", "dport",
"forwardfor",
"httplog", "httplog",
"maxconn", "maxconn",
"nologin", "nologin",
"pidfile",
"redispatch", "redispatch",
"sess", "sess",
"tcplog", "tcplog",

1
README.md
View File

@@ -101,6 +101,7 @@ Multiple ACLs need to be added as array, and will create one line each.
## SELINUX ## SELINUX
All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored. All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored.
If selinux is set to `enforce` (not controlled within this module) and `hy_show_stats`is set to `true`, the parameter `hy_selinux_allow_stats` must also be set to `true`, else the haproxy service will not start as selinux will not allow it.
## Known Problems ## Known Problems

4
manifests/params.pp
View File

@@ -54,6 +54,7 @@
# @param [Boolean] hy_use_dontlognull whether to use dontlognull as default # @param [Boolean] hy_use_dontlognull whether to use dontlognull as default
# @param [String] hy_be_userlist backend userlist comment # @param [String] hy_be_userlist backend userlist comment
# @param [Boolean] hy_manage_be_users whether to manage backend users # @param [Boolean] hy_manage_be_users whether to manage backend users
# @param [Boolean] hy_selinux_allow_stats whether to allow stats in selinux
############################################################################### ###############################################################################
class confdroid_haproxy::params ( class confdroid_haproxy::params (
@@ -69,6 +70,9 @@ class confdroid_haproxy::params (
# fail2ban # fail2ban
Boolean $hy_manage_fail2ban = false, Boolean $hy_manage_fail2ban = false,
# selinux
Boolean $hy_selinux_allow_stats = false,
# main config # main config
String $hy_http_port = '80', String $hy_http_port = '80',
String $hy_https_port = '443', String $hy_https_port = '443',

9
templates/haproxy_head.erb
View File

@@ -7,10 +7,6 @@ global
log <%= @hy_log_local1 %> log <%= @hy_log_local1 %>
<% if @hy_hard_stop == true -%> <% if @hy_hard_stop == true -%>
hard-stop-after <%= @hy_hard_stop_value %> hard-stop-after <%= @hy_hard_stop_value %>
<% end -%>
<% if @hy_show_stats == true -%>
stats socket /var/lib/haproxy/stats
stats timeout 30s
<% end -%> <% end -%>
chroot <%= @hy_chroot %> chroot <%= @hy_chroot %>
pidfile <%= @hy_pid %> pidfile <%= @hy_pid %>
@@ -54,8 +50,9 @@ defaults
timeout check <%= @hy_timeout_check %> timeout check <%= @hy_timeout_check %>
maxconn <%= @hy_maxconn %> maxconn <%= @hy_maxconn %>
<% if @hy_show_stats == true -%>
listen stats listen stats
bind 127.0.0.1:8404 # Bind to localhost if only local access is needed # bind *:8404
mode http mode http
stats enable stats enable
stats uri /haproxy?stats stats uri /haproxy?stats
@@ -63,6 +60,8 @@ listen stats
stats auth <%= @hy_stats_auth %> stats auth <%= @hy_stats_auth %>
stats refresh 30s stats refresh 30s
stats admin if TRUE # Allow admin actions if logged in stats admin if TRUE # Allow admin actions if logged in
<% end -%>
listen stats
<% if @hy_manage_be_users == true -%> <% if @hy_manage_be_users == true -%>
<%= @hy_be_userlist %> <%= @hy_be_userlist %>