feat: add selinux support to puppetboard

- required to allow nginx to reach puppetdb
2023-12-11 22:14:45 +11:00
parent 7f270675b1
commit bf729d9b11
2 changed files with 33 additions and 0 deletions
@@ -0,0 +1,22 @@
+# profiles::selinux::nginx
+# selinux settings for nginx
+class profiles::selinux::nginx (
+  Boolean $persistent = true,
+  Boolean $httpd_can_network_connect = true,
+  String  $selinux_mode = 'enforcing',
+){
+  # include packages that are required
+  include profiles::packages::selinux
+
+  # setenforce
+  class { 'profiles::selinux::setenforce':
+    mode => $selinux_mode,
+  }
+
+  # make sure we can connect to network resources
+  selboolean { 'httpd_can_network_connect':
+    persistent => $persistent,
+    value      => $httpd_can_network_connect,
+  }
+}
+