denc-webcluster: nginx AppArmor rules

Allow access to client trust certificate and to static content. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
web-proxy: include apparmor.local
2023-02-12 16:34:44 +01:00 · 2023-02-12 16:34:37 +01:00
2 changed files with 1 additions and 6 deletions
--- a/pillar/cluster/denc/web-proxy.sls
+++ b/pillar/cluster/denc/web-proxy.sls
@ -214,4 +214,5 @@ profile:
  apparmor:
    local:
      usr.sbin.nginx:
        - '{{ trustcrt }} r,'
        - '/srv/www/{libsso.net,sso.casa,sso.syscid.com}/{index.html,stuff/tacit-css-1.5.2.min.css} r,'
--- a/pillar/role/web-proxy.sls
+++ b/pillar/role/web-proxy.sls
@ -68,9 +68,3 @@ firewalld:
      services:
        - http
        - https
 profile:
  apparmor:
    local:
      usr.sbin.nginx:
        - '{{ trustcrt }} r,'