From 533aedd864fce377ee4cc543bad5edcf4ef6acf3 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Date: Sun, 12 Feb 2023 14:37:45 +0100
Subject: [PATCH] denc-webcluster: enable keepalived script security

Prevent script tampering.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
---
 pillar/cluster/denc/web-proxy.sls | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pillar/cluster/denc/web-proxy.sls b/pillar/cluster/denc/web-proxy.sls
index 41c78d2..2e8859d 100644
--- a/pillar/cluster/denc/web-proxy.sls
+++ b/pillar/cluster/denc/web-proxy.sls
@@ -15,6 +15,7 @@ keepalived:
       smtp_server: {{ mailer }}
       smtp_connect_timeout: 30
       router_id: SSO_FO
+      enable_script_security: true
     vrrp_script:
       check_nginx_port:
         script: '"/usr/bin/curl -kfsSm2 https://[::1]:443"'