Recommit for updates in build 4
This commit is contained in:
@@ -186,7 +186,7 @@
|
|||||||
|
|
||||||
<h2 id="label-SELINUX">SELINUX</h2>
|
<h2 id="label-SELINUX">SELINUX</h2>
|
||||||
|
|
||||||
<p>All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored.</p>
|
<p>All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored. If selinux is set to <code>enforce</code> (not controlled within this module) and <code>hy_show_stats</code>is set to <code>true</code>, the parameter <code>hy_selinux_allow_stats</code> must also be set to <code>true</code>, else the haproxy service will not start as selinux will not allow it.</p>
|
||||||
|
|
||||||
<h2 id="label-Known+Problems">Known Problems</h2>
|
<h2 id="label-Known+Problems">Known Problems</h2>
|
||||||
|
|
||||||
|
|||||||
@@ -186,7 +186,7 @@
|
|||||||
|
|
||||||
<h2 id="label-SELINUX">SELINUX</h2>
|
<h2 id="label-SELINUX">SELINUX</h2>
|
||||||
|
|
||||||
<p>All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored.</p>
|
<p>All files and directories are configured with correct selinux context. If selinux is disabled, these contexts are ignored. If selinux is set to <code>enforce</code> (not controlled within this module) and <code>hy_show_stats</code>is set to <code>true</code>, the parameter <code>hy_selinux_allow_stats</code> must also be set to <code>true</code>, else the haproxy service will not start as selinux will not allow it.</p>
|
||||||
|
|
||||||
<h2 id="label-Known+Problems">Known Problems</h2>
|
<h2 id="label-Known+Problems">Known Problems</h2>
|
||||||
|
|
||||||
|
|||||||
@@ -109,7 +109,13 @@
|
|||||||
11
|
11
|
||||||
12
|
12
|
||||||
13
|
13
|
||||||
14</pre>
|
14
|
||||||
|
15
|
||||||
|
16
|
||||||
|
17
|
||||||
|
18
|
||||||
|
19
|
||||||
|
20</pre>
|
||||||
</td>
|
</td>
|
||||||
<td>
|
<td>
|
||||||
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span>
|
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span>
|
||||||
@@ -122,6 +128,12 @@ class confdroid_haproxy::main::config (
|
|||||||
if $hy_manage_fail2ban == true {
|
if $hy_manage_fail2ban == true {
|
||||||
include confdroid_haproxy::monitoring::fail2ban
|
include confdroid_haproxy::monitoring::fail2ban
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if $hy_selinux_allow_stats == true {
|
||||||
|
exec { 'setsebool haproxy_connect_any on':
|
||||||
|
path => ['/bin', '/usr/bin', '/sbin', '/usr/sbin'],
|
||||||
|
}
|
||||||
|
}
|
||||||
}</pre>
|
}</pre>
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
|
|||||||
@@ -861,6 +861,24 @@
|
|||||||
—
|
—
|
||||||
<div class='inline'>
|
<div class='inline'>
|
||||||
<p>whether to manage backend users</p>
|
<p>whether to manage backend users</p>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
</li>
|
||||||
|
|
||||||
|
<li>
|
||||||
|
|
||||||
|
<span class='name'>hy_selinux_allow_stats</span>
|
||||||
|
|
||||||
|
|
||||||
|
<span class='type'>(<tt>Boolean</tt>)</span>
|
||||||
|
|
||||||
|
|
||||||
|
<em class="default">(defaults to: <tt>false</tt>)</em>
|
||||||
|
|
||||||
|
|
||||||
|
—
|
||||||
|
<div class='inline'>
|
||||||
|
<p>whether to allow stats in selinux</p>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
</li>
|
</li>
|
||||||
@@ -876,7 +894,6 @@
|
|||||||
<pre class="lines">
|
<pre class="lines">
|
||||||
|
|
||||||
|
|
||||||
58
|
|
||||||
59
|
59
|
||||||
60
|
60
|
||||||
61
|
61
|
||||||
@@ -964,10 +981,14 @@
|
|||||||
143
|
143
|
||||||
144
|
144
|
||||||
145
|
145
|
||||||
146</pre>
|
146
|
||||||
|
147
|
||||||
|
148
|
||||||
|
149
|
||||||
|
150</pre>
|
||||||
</td>
|
</td>
|
||||||
<td>
|
<td>
|
||||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 58</span>
|
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 59</span>
|
||||||
|
|
||||||
class confdroid_haproxy::params (
|
class confdroid_haproxy::params (
|
||||||
|
|
||||||
@@ -983,6 +1004,9 @@ class confdroid_haproxy::params (
|
|||||||
# fail2ban
|
# fail2ban
|
||||||
Boolean $hy_manage_fail2ban = false,
|
Boolean $hy_manage_fail2ban = false,
|
||||||
|
|
||||||
|
# selinux
|
||||||
|
Boolean $hy_selinux_allow_stats = false,
|
||||||
|
|
||||||
# main config
|
# main config
|
||||||
String $hy_http_port = '80',
|
String $hy_http_port = '80',
|
||||||
String $hy_https_port = '443',
|
String $hy_https_port = '443',
|
||||||
|
|||||||
Reference in New Issue
Block a user