OP#669 add config section to execute haproxy_connect_any
This commit is contained in:
1
.vscode/settings.json
vendored
1
.vscode/settings.json
vendored
@@ -9,6 +9,7 @@
|
|||||||
"pidfile",
|
"pidfile",
|
||||||
"redispatch",
|
"redispatch",
|
||||||
"sess",
|
"sess",
|
||||||
|
"setsebool",
|
||||||
"tcplog",
|
"tcplog",
|
||||||
"userlist"
|
"userlist"
|
||||||
]
|
]
|
||||||
|
|||||||
@@ -11,4 +11,10 @@ class confdroid_haproxy::main::config (
|
|||||||
if $hy_manage_fail2ban == true {
|
if $hy_manage_fail2ban == true {
|
||||||
include confdroid_haproxy::monitoring::fail2ban
|
include confdroid_haproxy::monitoring::fail2ban
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if $hy_selinux_allow_stats == true {
|
||||||
|
exec { 'setsebool haproxy_connect_any on':
|
||||||
|
path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
|
||||||
|
}
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user