# profiles::selinux::nginx
# selinux settings for nginx
class profiles::selinux::nginx (
  Boolean $persistent = true,
  Boolean $httpd_can_network_connect = true,
  String  $selinux_mode = 'enforcing',
){

  # setenforce
  class { 'profiles::selinux::setenforce':
    mode => $selinux_mode,
  }

  # make sure we can connect to network resources
  selboolean { 'httpd_can_network_connect':
    persistent => $persistent,
    value      => $httpd_can_network_connect,
  }
}