denc-webcluster: nginx AppArmor rules

Allow access to static content. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
2023-02-12 16:28:19 +01:00 · 2023-02-12 16:28:19 +01:00 · 124f1ee226
commit 124f1ee226
parent 33ea034b90
1 changed files with 6 additions and 0 deletions
--- a/pillar/cluster/denc/web-proxy.sls
+++ b/pillar/cluster/denc/web-proxy.sls
@ -209,3 +209,9 @@ firewalld:
      services:
        - http
        - https
+
+profile:
+  apparmor:
+    local:
+      usr.sbin.nginx:
+        - '/srv/www/{libsso.net,sso.casa,sso.syscid.com}/{index.html,stuff/tacit-css-1.5.2.min.css} r,'