Browse Source

minifirewall: no http filtering by default

lpoujol/fpm-php
Jérémy Lecour 1 year ago
committed by Jérémy Lecour
parent
commit
5476538eb1
2 changed files with 3 additions and 1 deletions
  1. +1
    -0
      CHANGELOG.md
  2. +2
    -1
      minifirewall/files/minifirewall.conf

+ 1
- 0
CHANGELOG.md View File

@ -43,6 +43,7 @@ evolinux-base: on debian 10 and later, add /usr/share/scripts in root's PATH
* lxc: rely on lxc_container module instead of command module
* lxc: remove useless loop in apt execution
* lxc: update our default template to be compatible with Debian 10
* minifirewall: no http filtering by default
* php: By default, allow 128M for OpCache (instead of 64M)
* php: Don't set a chroot for the default fpm pool
* rbenv: install Ruby 2.6.5 by default


+ 2
- 1
minifirewall/files/minifirewall.conf View File

@ -50,7 +50,8 @@ DNSSERVEURS='0.0.0.0/0'
# HTTP authorizations
# (you can use DNS names but set cron to reload minifirewall regularly)
# (if you have HTTP proxy, set 0.0.0.0/0)
HTTPSITES='security.debian.org security-cdn.debian.org pub.evolix.net volatile.debian.org mirror.evolix.org backports.debian.org hwraid.le-vert.net antispam00.evolix.org spamassassin.apache.org sa-update.space-pro.be sa-update.secnap.net www.sa-update.pccc.com sa-update.dnswl.org'
# HTTPSITES='security.debian.org security-cdn.debian.org pub.evolix.net volatile.debian.org mirror.evolix.org backports.debian.org hwraid.le-vert.net antispam00.evolix.org spamassassin.apache.org sa-update.space-pro.be sa-update.secnap.net www.sa-update.pccc.com sa-update.dnswl.org'
HTTPSITES='0.0.0.0/0'
# HTTPS authorizations
HTTPSSITES='0.0.0.0/0'


Loading…
Cancel
Save