From 533aedd864fce377ee4cc543bad5edcf4ef6acf3 Mon Sep 17 00:00:00 2001 From: Georg Pfuetzenreuter Date: Sun, 12 Feb 2023 14:37:45 +0100 Subject: denc-webcluster: enable keepalived script security Prevent script tampering. Signed-off-by: Georg Pfuetzenreuter --- pillar/cluster/denc/web-proxy.sls | 1 + 1 file changed, 1 insertion(+) diff --git a/pillar/cluster/denc/web-proxy.sls b/pillar/cluster/denc/web-proxy.sls index 41c78d2..2e8859d 100644 --- a/pillar/cluster/denc/web-proxy.sls +++ b/pillar/cluster/denc/web-proxy.sls @@ -15,6 +15,7 @@ keepalived: smtp_server: {{ mailer }} smtp_connect_timeout: 30 router_id: SSO_FO + enable_script_security: true vrrp_script: check_nginx_port: script: '"/usr/bin/curl -kfsSm2 https://[::1]:443"' -- cgit v1.2.3