Fix podman SSH key paths and add registry support
- Configure SELinux to permit nginx network connections
This commit is contained in:
@@ -41,6 +41,8 @@
|
||||
dest: "/etc/nginx/sites-available/{{ item.domain }}.conf"
|
||||
mode: "400"
|
||||
loop: "{{ proxy.servers }}"
|
||||
loop_control:
|
||||
label: "{{ item.domain }}"
|
||||
notify: reload_nginx
|
||||
register: nginx_sites
|
||||
|
||||
@@ -105,6 +107,16 @@
|
||||
when: proxy.production is defined and proxy.production and proxy.dns_cloudflare is defined
|
||||
notify: reload_nginx
|
||||
|
||||
- name: Enable httpd_can_network_connect to allow nginx network access
|
||||
ansible.posix.seboolean:
|
||||
name: httpd_can_network_connect
|
||||
state: true
|
||||
persistent: true
|
||||
when:
|
||||
- selinux is defined
|
||||
- selinux is not false
|
||||
- proxy is defined
|
||||
|
||||
- name: Add HTTP and HTTPS firewall rule
|
||||
community.general.ufw:
|
||||
rule: allow
|
||||
|
||||
Reference in New Issue
Block a user