summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGeorg Pfuetzenreuter2023-02-12 14:37:45 +0100
committerGeorg Pfuetzenreuter2023-02-12 14:37:45 +0100
commit533aedd864fce377ee4cc543bad5edcf4ef6acf3 (patch)
tree46ffac55296534d950187c8e2c4180b8980bab38
parent7481741f95e591727b2dee0e58c31d68f58c5359 (diff)
downloadsalt-533aedd864fce377ee4cc543bad5edcf4ef6acf3.tar.gz
salt-533aedd864fce377ee4cc543bad5edcf4ef6acf3.tar.bz2
salt-533aedd864fce377ee4cc543bad5edcf4ef6acf3.zip
denc-webcluster: enable keepalived script security
Prevent script tampering. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
-rw-r--r--pillar/cluster/denc/web-proxy.sls1
1 files changed, 1 insertions, 0 deletions
diff --git a/pillar/cluster/denc/web-proxy.sls b/pillar/cluster/denc/web-proxy.sls
index 41c78d2..2e8859d 100644
--- a/pillar/cluster/denc/web-proxy.sls
+++ b/pillar/cluster/denc/web-proxy.sls
@@ -15,6 +15,7 @@ keepalived:
smtp_server: {{ mailer }}
smtp_connect_timeout: 30
router_id: SSO_FO
+ enable_script_security: true
vrrp_script:
check_nginx_port:
script: '"/usr/bin/curl -kfsSm2 https://[::1]:443"'