From 5b20bf27ace044ad3a24981d7e927277b61672eb Mon Sep 17 00:00:00 2001
From: 12ww1160 <12ww1160@confdroid.com>
Date: Sat, 5 Sep 2026 12:52:42 +0200
Subject: [PATCH] OP#669 add config section to execute haproxy_connect_any

---
 .vscode/settings.json    | 1 +
 manifests/main/config.pp | 6 ++++++
 2 files changed, 7 insertions(+)

diff --git a/.vscode/settings.json b/.vscode/settings.json
index 85a82f4..3e3b918 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -9,6 +9,7 @@
         "pidfile",
         "redispatch",
         "sess",
+        "setsebool",
         "tcplog",
         "userlist"
     ]
diff --git a/manifests/main/config.pp b/manifests/main/config.pp
index ff353d2..a5d0cab 100644
--- a/manifests/main/config.pp
+++ b/manifests/main/config.pp
@@ -11,4 +11,10 @@ class confdroid_haproxy::main::config (
   if $hy_manage_fail2ban == true {
     include confdroid_haproxy::monitoring::fail2ban
   }
+
+  if $hy_selinux_allow_stats == true {
+    exec { 'setsebool haproxy_connect_any on':
+      path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
+    }
+  }
 }