Actions
Story #8536
closedOption to not configure ipv6 listening in nginx config
Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
-
Category:
Installer - Moved to GitHub issues
Sprint/Milestone:
Start date:
Due date:
% Done:
100%
Estimated time:
Platform Release:
master
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Quarter:
Description
For environment with ipv6 disabled, provide a option/check to determine if ipv6 listener should be configured.
In roles/pulp_webserver/templates/nginx.conf.j2, the configuration default to always listen on both ipv4 and ipv6.
{% if pulp_webserver_disable_https | bool %}
listen {{ pulp_webserver_http_port }} default_server deferred;
listen [::]:{{ pulp_webserver_http_port }} default_server deferred;
{% else %}
listen {{ pulp_webserver_https_port }} default_server deferred ssl;
listen [::]:{{ pulp_webserver_https_port }} default_server deferred ssl;
One option may be to base this on the ansible_all_ipv6_addresses fact.
{% if pulp_webserver_disable_https | bool %}
listen {{ pulp_webserver_http_port }} default_server deferred;
{% if ansible_all_ipv6_addresses != [] %}
listen [::]:{{ pulp_webserver_http_port }} default_server deferred;
{% endif %}
{% else %}
listen {{ pulp_webserver_https_port }} default_server deferred ssl;
{% if ansible_all_ipv6_addresses != [] %}
listen [::]:{{ pulp_webserver_https_port }} default_server deferred ssl;
{% endif %}
Related issues
Actions
Only listen IPv6 when it is configured on the managed host
https://pulp.plan.io/issues/8536 closes #8536