Fix podman SSH key paths and add registry support

- Configure SELinux to permit nginx network connections
This commit is contained in:
2026-01-25 13:01:29 -05:00
parent e2e5fdcd67
commit 213e7ed175
4 changed files with 41 additions and 2 deletions

View File

@@ -41,6 +41,8 @@
dest: "/etc/nginx/sites-available/{{ item.domain }}.conf"
mode: "400"
loop: "{{ proxy.servers }}"
loop_control:
label: "{{ item.domain }}"
notify: reload_nginx
register: nginx_sites
@@ -105,6 +107,16 @@
when: proxy.production is defined and proxy.production and proxy.dns_cloudflare is defined
notify: reload_nginx
- name: Enable httpd_can_network_connect to allow nginx network access
ansible.posix.seboolean:
name: httpd_can_network_connect
state: true
persistent: true
when:
- selinux is defined
- selinux is not false
- proxy is defined
- name: Add HTTP and HTTPS firewall rule
community.general.ufw:
rule: allow