Turn on httpd_can_network_connect for reverseproxy.

2015-01-06 19:23:43 +00:00 · 2015-01-06 19:23:43 +00:00 · 2053ae2d31
commit 2053ae2d31
parent 2b330e5475
1 changed files with 10 additions and 0 deletions
--- a/roles/httpd/proxy/tasks/main.yml
+++ b/roles/httpd/proxy/tasks/main.yml
@ -40,3 +40,13 @@
  tags:
  - httpd
  - httpd/proxy
+
+- name: Turn on certain selinux booleans we need for our proxy layer
+  seboolean: name={{ item }} state=true persistent=true
+  with_items:
+  # We need this for httpd to be able to reverseproxy to other machines.
+  - httpd_can_network_connect
+  tags:
+  - httpd
+  - httpd/proxy
+  - selinux