haproxy: add haproxy_allow_ip_nonlocal_bind to set sysctl value
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
519ef930df
commit
abb14e5b52
|
@ -12,6 +12,8 @@ The **patch** part changes is incremented if multiple releases happen the same m
|
||||||
|
|
||||||
### Added
|
### Added
|
||||||
|
|
||||||
|
* haproxy: add haproxy_allow_ip_nonlocal_bind to set sysctl value (optional)
|
||||||
|
|
||||||
### Changed
|
### Changed
|
||||||
|
|
||||||
### Fixed
|
### Fixed
|
||||||
|
|
|
@ -35,3 +35,5 @@ haproxy_deny_ips: []
|
||||||
haproxy_backports_packages_stretch: haproxy libssl1.0.0
|
haproxy_backports_packages_stretch: haproxy libssl1.0.0
|
||||||
haproxy_backports_packages_buster: haproxy
|
haproxy_backports_packages_buster: haproxy
|
||||||
haproxy_backports_packages_bullseye: haproxy
|
haproxy_backports_packages_bullseye: haproxy
|
||||||
|
|
||||||
|
haproxy_allow_ip_nonlocal_bind: Null
|
|
@ -134,4 +134,17 @@
|
||||||
- haproxy
|
- haproxy
|
||||||
- logrotate
|
- logrotate
|
||||||
|
|
||||||
|
- name: Set net.ipv4.ip_nonlocal_bind
|
||||||
|
sysctl:
|
||||||
|
name: net.ipv4.ip_nonlocal_bind
|
||||||
|
value: "{{ haproxy_allow_ip_nonlocal_bind | ternary('1','0') }}"
|
||||||
|
sysctl_file: "{{ evolinux_kernel_sysctl_path | default('/etc/sysctl.d/evolinux.conf') }}"
|
||||||
|
state: present
|
||||||
|
reload: yes
|
||||||
|
tags:
|
||||||
|
- haproxy
|
||||||
|
when:
|
||||||
|
- haproxy_allow_ip_nonlocal_bind is defined
|
||||||
|
- haproxy_allow_ip_nonlocal_bind is not none
|
||||||
|
|
||||||
- include: munin.yml
|
- include: munin.yml
|
||||||
|
|
Loading…
Reference in a new issue