diff --git a/doc/file.README.html b/doc/file.README.html index 135f5c5..7c5760f 100644 --- a/doc/file.README.html +++ b/doc/file.README.html @@ -186,7 +186,7 @@
All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored.
+All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored. If selinux is set to enforce (not controlled within this module) and hy_show_statsis set to true, the parameter hy_selinux_allow_stats must also be set to true, else the haproxy service will not start as selinux will not allow it.
All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored.
+All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored. If selinux is set to enforce (not controlled within this module) and hy_show_statsis set to true, the parameter hy_selinux_allow_stats must also be set to true, else the haproxy service will not start as selinux will not allow it.
# File 'manifests/main/config.pp', line 6
@@ -122,6 +128,12 @@ class confdroid_haproxy::main::config (
if $hy_manage_fail2ban == true {
include confdroid_haproxy::monitoring::fail2ban
}
+
+ if $hy_selinux_allow_stats == true {
+ exec { 'setsebool haproxy_connect_any on':
+ path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
+ }
+ }
}
whether to manage backend users
+whether to allow stats in selinux
-58 59 60 61 @@ -964,10 +981,14 @@ 143 144 145 -146+146 +147 +148 +149 +150
# File 'manifests/params.pp', line 58
+ # File 'manifests/params.pp', line 59
class confdroid_haproxy::params (
@@ -983,6 +1004,9 @@ class confdroid_haproxy::params (
# fail2ban
Boolean $hy_manage_fail2ban = false,
+# selinux
+ Boolean $hy_selinux_allow_stats = false,
+
# main config
String $hy_http_port = '80',
String $hy_https_port = '443',