denc-webcluster: enable keepalived script security

Prevent script tampering. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
2023-02-12 14:37:45 +01:00 · 2023-02-12 14:37:45 +01:00 · 533aedd864
commit 533aedd864
parent 7481741f95
1 changed files with 1 additions and 0 deletions
--- a/pillar/cluster/denc/web-proxy.sls
+++ b/pillar/cluster/denc/web-proxy.sls
@ -15,6 +15,7 @@ keepalived:
      smtp_server: {{ mailer }}
      smtp_connect_timeout: 30
      router_id: SSO_FO
+      enable_script_security: true
    vrrp_script:
      check_nginx_port:
        script: '"/usr/bin/curl -kfsSm2 https://[::1]:443"'