denc-webcluster: allow http(s) publicly #24

Merged
Georg merged 2 commits from import-denc-webcluster-fw into production 2023-02-12 14:44:21 +01:00

View File

@ -15,6 +15,7 @@ keepalived:
smtp_server: {{ mailer }} smtp_server: {{ mailer }}
smtp_connect_timeout: 30 smtp_connect_timeout: 30
router_id: SSO_FO router_id: SSO_FO
enable_script_security: true
vrrp_script: vrrp_script:
check_nginx_port: check_nginx_port:
script: '"/usr/bin/curl -kfsSm2 https://[::1]:443"' script: '"/usr/bin/curl -kfsSm2 https://[::1]:443"'
@ -204,3 +205,10 @@ nginx:
- proxy_busy_buffers_size: 512k - proxy_busy_buffers_size: 512k
- error_log: /var/log/nginx/libsso_public.error.log - error_log: /var/log/nginx/libsso_public.error.log
- access_log: /var/log/nginx/libsso_public.access.log combined - access_log: /var/log/nginx/libsso_public.access.log combined
firewalld:
zones:
public:
services:
- http
- https