Skip to content

Commit

Permalink
docs(installation): proofread the note on SELinux policy (#5800)
Browse files Browse the repository at this point in the history
Signed-off-by: ossdhaval <343411+ossdhaval@users.noreply.github.com>
Signed-off-by: Mustafa Baser <mbaser@mail.com>
  • Loading branch information
ossdhaval authored and devrimyatar committed Dec 30, 2023
1 parent c378dc8 commit 93b115b
Showing 1 changed file with 8 additions and 6 deletions.
14 changes: 8 additions & 6 deletions docs/admin/install/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -47,12 +47,14 @@ database. If you intend to deploy a Janssen Server in production for high
concurrency, make sure you benchmark the exact flows you expect to serve
in production.

## SELinux

Janssen servers bind to localhost and apache web server forwards requests to
Janssen servers (reverse proxy). If you have SELinux enabled VM, apache can't
forwards requests to Jansses server. Therefore setup script adds the following
SELinux policy:
## SELinux Policy

Janssen Server installs and uses the Apache web server as a `reverse proxy`.
While the Janssen Server itself will bind to `localhost`, the Apache reverse
proxy listens to external interfaces and forwards the
request to the Janssen Server. If you have SELinux enabled VM,
then the Apache web server can't forward the request to Janssen Server.
Therefore setup script adds the following SELinux policy:

```
httpd_can_network_connect 1 -P
Expand Down

0 comments on commit 93b115b

Please # to comment.