Compare commits

..

2 Commits

Author SHA1 Message Date
124f1ee226
denc-webcluster: nginx AppArmor rules
Some checks failed
ci/lysergic/push/pipeline Pipeline failed
Allow access to static content.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
2023-02-12 16:28:19 +01:00
33ea034b90
web-proxy: include apparmor.local
- allow access to trust certificate
- some web proxy servers need additional AppArmor drop-ins, for example
for serving static content

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
2023-02-12 16:27:40 +01:00
2 changed files with 6 additions and 1 deletions

View File

@ -214,5 +214,4 @@ profile:
apparmor:
local:
usr.sbin.nginx:
- '{{ trustcrt }} r,'
- '/srv/www/{libsso.net,sso.casa,sso.syscid.com}/{index.html,stuff/tacit-css-1.5.2.min.css} r,'

View File

@ -68,3 +68,9 @@ firewalld:
services:
- http
- https
profile:
apparmor:
local:
usr.sbin.nginx:
- '{{ trustcrt }} r,'