Project

Profile

Help

Story #8536

closed

Option to not configure ipv6 listening in nginx config

Added by benjdudas almost 3 years ago. Updated almost 3 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
-
Category:
Installer - Moved to GitHub issues
Sprint/Milestone:
Start date:
Due date:
% Done:

100%

Estimated time:
Platform Release:
master
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Quarter:

Description

For environment with ipv6 disabled, provide a option/check to determine if ipv6 listener should be configured.

In roles/pulp_webserver/templates/nginx.conf.j2, the configuration default to always listen on both ipv4 and ipv6.

{% if pulp_webserver_disable_https | bool %}
        listen {{ pulp_webserver_http_port }} default_server deferred;
        listen [::]:{{ pulp_webserver_http_port }} default_server deferred;
{% else %}
        listen {{ pulp_webserver_https_port }} default_server deferred ssl;
        listen [::]:{{ pulp_webserver_https_port }} default_server deferred ssl;

One option may be to base this on the ansible_all_ipv6_addresses fact.

{% if pulp_webserver_disable_https | bool %}
        listen {{ pulp_webserver_http_port }} default_server deferred;
        {% if ansible_all_ipv6_addresses != [] %}
        listen [::]:{{ pulp_webserver_http_port }} default_server deferred;
        {% endif %}
{% else %}
        listen {{ pulp_webserver_https_port }} default_server deferred ssl;
        {% if ansible_all_ipv6_addresses != [] %}
        listen [::]:{{ pulp_webserver_https_port }} default_server deferred ssl;
        {% endif %}

Related issues

Has duplicate Pulp - Issue #8583: pulp_webserver should work with IPv6 disabledCLOSED - DUPLICATEActions
Has duplicate Pulp - Issue #8069: pulp_installer: Add if block for enabling/disabling IPv6 based on the presence of IPv6 interfaces on the hostCLOSED - DUPLICATEActions

Also available in: Atom PDF