No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

View Options

	diff --git a/roles/paas-docker/nginx/init.sls b/roles/paas-docker/nginx/init.sls
	index b0aa299..2f9cbf6 100644
	--- a/roles/paas-docker/nginx/init.sls
	+++ b/roles/paas-docker/nginx/init.sls
	@@ -1,10 +1,11 @@
	# -------------------------------------------------------------
	# Salt — Provision Docker engine
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Project: Nasqueron
	# Created: 2018-03-16
	# License: Trivial work, not eligible to copyright
	# -------------------------------------------------------------

	include:
	- .config
	+ - .selinux
	diff --git a/roles/paas-docker/nginx/selinux.sls b/roles/paas-docker/nginx/selinux.sls
	new file mode 100644
	index 0000000..b72af4f
	--- /dev/null
	+++ b/roles/paas-docker/nginx/selinux.sls
	@@ -0,0 +1,22 @@
	+# -------------------------------------------------------------
	+# Salt — Provision Docker engine
	+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	+# Project: Nasqueron
	+# Created: 2018-03-23
	+# License: Trivial work, not eligible to copyright
	+# -------------------------------------------------------------
	+
	+{% if grains['os_family'] == 'RedHat' %}
	+
	+# On Fedora and downstreams, SELinux restricts the capability
	+# of HTTP server to connect to external servers.
	+#
	+# This feature allows nginx to connect to other servers,
	+# and so to act as a front-end server through proxy_pass.
	+
	+httpd_can_network_connect:
	+ selinux.boolean:
	+ - value: True
	+ - persist: True
	+
	+{% endif %}