Compare commits

...

2 Commits

Author SHA1 Message Date
c25a5c6e05
denc-webcluster: nginx AppArmor rules
All checks were successful
ci/lysergic/push/pipeline Pipeline was successful
Allow access to client trust certificate and to static content.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
2023-02-12 16:38:22 +01:00
1ac51ae11b
web-proxy: include apparmor.local
Some web proxy servers need additional AppArmor drop-ins, for example
for serving static content.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
2023-02-12 16:38:22 +01:00
2 changed files with 8 additions and 0 deletions

View File

@ -209,3 +209,10 @@ firewalld:
services:
- http
- https
profile:
apparmor:
local:
usr.sbin.nginx:
- '{{ trustcrt }} r,'
- '/srv/www/{libsso.net,sso.casa,sso.syscid.com}/{index.html,stuff/tacit-css-1.5.2.min.css} r,'

View File

@ -1,4 +1,5 @@
include:
- profile.apparmor.local
- nginx.pkg
- nginx.config
- nginx.snippets