haproxy: add haproxy_allow_ip_nonlocal_bind to set sysctl value
continuous-integration/drone/push Build is passing Details

This commit is contained in:
Jérémy Lecour 2022-06-22 15:32:10 +02:00 committed by Jérémy Lecour
parent 519ef930df
commit abb14e5b52
3 changed files with 17 additions and 0 deletions

View File

@ -12,6 +12,8 @@ The **patch** part changes is incremented if multiple releases happen the same m
### Added
* haproxy: add haproxy_allow_ip_nonlocal_bind to set sysctl value (optional)
### Changed
### Fixed

View File

@ -35,3 +35,5 @@ haproxy_deny_ips: []
haproxy_backports_packages_stretch: haproxy libssl1.0.0
haproxy_backports_packages_buster: haproxy
haproxy_backports_packages_bullseye: haproxy
haproxy_allow_ip_nonlocal_bind: Null

View File

@ -134,4 +134,17 @@
- haproxy
- logrotate
- name: Set net.ipv4.ip_nonlocal_bind
sysctl:
name: net.ipv4.ip_nonlocal_bind
value: "{{ haproxy_allow_ip_nonlocal_bind | ternary('1','0') }}"
sysctl_file: "{{ evolinux_kernel_sysctl_path | default('/etc/sysctl.d/evolinux.conf') }}"
state: present
reload: yes
tags:
- haproxy
when:
- haproxy_allow_ip_nonlocal_bind is defined
- haproxy_allow_ip_nonlocal_bind is not none
- include: munin.yml