kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 28 Pull Requests 3 Projects 2 Activity

Fix ejabberd API permission for akkounts VMs

Browse Source 
It should have been using a /32, not a /8 subnet, in order to only allow
the akkounts VM(s) to use the API endpoints without further
authorization.
This commit is contained in:
Basti 2021-01-12 18:06:16 +01:00
parent 4ca875a77b
commit 74cf26846e
Signed by untrusted user: basti
GPG Key ID: 9F88009D31D99C72
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
site-cookbooks/kosmos-ejabberd/templates/ejabberd.yml.erb
View File

@ -177,7 +177,7 @@ api_permissions:
"akkounts": "akkounts":
who: who:
<% @akkounts_ip_addresses.each do |ip| -%> <% @akkounts_ip_addresses.each do |ip| -%>
- ip: "<%= ip %>/8" - ip: "<%= ip %>/32"
<% end -%> <% end -%>
what: what:
- "add_rosteritem" - "add_rosteritem"