Merge pull request 'denc-webcluster: allow http(s) publicly' (#24 ) from import-denc-webcluster-fw into production

Reviewed-on: #24
denc-webcluster: enable keepalived script security
2023-02-12 14:44:20 +01:00 · 2023-02-12 14:37:45 +01:00 · 2023-02-12 14:33:34 +01:00
1 changed files with 8 additions and 0 deletions
--- a/pillar/cluster/denc/web-proxy.sls
+++ b/pillar/cluster/denc/web-proxy.sls
@ -15,6 +15,7 @@ keepalived:
      smtp_server: {{ mailer }}
      smtp_connect_timeout: 30
      router_id: SSO_FO
+      enable_script_security: true
    vrrp_script:
      check_nginx_port:
        script: '"/usr/bin/curl -kfsSm2 https://[::1]:443"'
@ -204,3 +205,10 @@ nginx:
            - proxy_busy_buffers_size: 512k
            - error_log: /var/log/nginx/libsso_public.error.log
            - access_log: /var/log/nginx/libsso_public.access.log combined
+
+firewalld:
+  zones:
+    public:
+      services:
+        - http
+        - https
Author	SHA1	Message	Date
Georg Pfuetzenreuter	5fdbdc7462	Merge pull request 'denc-webcluster: allow http(s) publicly' (#24 ) from import-denc-webcluster-fw into production All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Reviewed-on: #24	2023-02-12 14:44:20 +01:00
Georg Pfuetzenreuter	533aedd864	denc-webcluster: enable keepalived script security All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Prevent script tampering. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 14:37:45 +01:00
Georg Pfuetzenreuter	7481741f95	denc-webcluster: allow http(s) publicly All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Public firewall rules were missing from initial import. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 14:33:34 +01:00