From a399dde7844ebc1154e844c5fa6f5a410bc18266 Mon Sep 17 00:00:00 2001
From: 12ww1160 <12ww1160@confdroid.com>
Date: Sat, 5 Sep 2026 13:09:55 +0200
Subject: [PATCH] OP#669 set hy_selinux_allow_status to true by default

---
 README.md           | 2 +-
 manifests/params.pp | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index e963241..f0c5161 100644
--- a/README.md
+++ b/README.md
@@ -101,7 +101,7 @@ Multiple ACLs need to be added as array, and will create one line each.
 ## SELINUX
 
 All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored.
-If selinux is set to `enforce` (not controlled within this module),  the parameter `hy_selinux_allow_stats` must also be set to `true`, else the haproxy service will not start  as selinux will not allow it.
+If selinux is set to `enforce` (not controlled within this module),  the parameter `hy_selinux_allow_stats` must also be set to `true`, else the haproxy service will not start  as selinux will not allow it. This is the default setting.
 
 ## Known Problems
 
diff --git a/manifests/params.pp b/manifests/params.pp
index 5d6117a..4f8c51b 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -71,7 +71,7 @@ class confdroid_haproxy::params (
   Boolean $hy_manage_fail2ban         = false,
 
 # selinux
-  Boolean $hy_selinux_allow_stats     = false,
+  Boolean $hy_selinux_allow_stats     = true,
 
 # main config
   String $hy_http_port                = '80',