Last active
August 1, 2018 21:31
-
-
Save totoCZ/cba23c3e0e36227d7a13e8a5d742e510 to your computer and use it in GitHub Desktop.
caddy for SELinux
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| setcap cap_net_bind_service=+ep /usr/local/bin/caddy | |
| nano /etc/systemd/system/caddy.service | |
| semanage fcontext -a -t httpd_exec_t /usr/local/bin/caddy | |
| restorecon /usr/local/bin/caddy | |
| chown www-data:www-data /etc/ssl/caddy/ | |
| semanage fcontext -a -t httpd_sys_rw_content_t /etc/ssl/caddy | |
| restorecon /etc/ssl/caddy | |
| chown www-data:www-data /var/log/caddy/ | |
| semanage fcontext -a -t httpd_log_t "/var/log/caddy(/.*)?" | |
| chcon system_u:object_r:httpd_log_t:s0 /var/log/caddy | |
| semanage port -a -t http_port_t -p tcp 5033 | |
| setsebool -P httpd_can_network_connect 1 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Doing
setsebool -P httpd_can_network_connect 1was pretty helpful for fixing "permission denied" errors when connecting to Lets Encrypt.Thank's for sharing your script 😃