Novos/salt-statetree
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

podman - npm: redefine unprivileged ports

Browse source
This commit is contained in:
LinuxSquare 2023-10-27 17:09:51 +02:00
parent ed36fb8041
commit 6e020a8333
2 changed files with 10 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
podman/containers/files/files_unprivileged_ports.jinja Normal file
View file

@ -0,0 +1,3 @@
{%- for port in UNPRIVILEGED_PORTS %}
net.ipv4.ip_unprivileged_port_start={{ port }}
{%- endfor %}

11
podman/containers/npm.sls
View file

@ -42,7 +42,10 @@ podman_containers_npm_letsencrypt_dir:
podman_containers_npm_privileged_ports:
file.managed:
- name: /etc/sysctl.d/podman.conf
- text: |
net.ipv4.ip_unprivileged_port_start=80
net.ipv4.ip_unprivileged_port_start=443
net.ipv4.ip_unprivileged_port_start=81
- source: salt://{{ tpldir }}/files/files_unprivileged_ports.jinja
- template: jinja
- context:
UNPRIVILEGED_PORTS: [22, 80, 81, 443]
- user: root
- group: root
- mode: '0644'