nagios_server / noc02: set seboolean to allow certgetter to work

noc02 needs to be able to proxy to certgetter for the acme challenge for
ssl certs. So, set this there to allow that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-11-08 15:39:23 -08:00
parent ea4a9bcbb6
commit fdf34aab57

View file

@ -60,6 +60,13 @@
- mod_ssl
when: env == "production" and nagios_location == "external"
- name: set sebooleans so nagios can talk to the certgetter01 for ssl certs
seboolean: name=httpd_can_network_connect
state=true
persistent=true
tags:
- nagios_server
- selinux
# ## Copy over the httpd SSL certs for external
# - name: Install the SSL cert so that we can use https