From 29c9e14f62791fa212390d433443c4b8ecc3cd1c Mon Sep 17 00:00:00 2001 From: Jake Howard Date: Mon, 5 Oct 2020 11:10:29 +0100 Subject: [PATCH] Remove haproxy chroot This is technically _slightly_ less secure, but means it logs to journald properly, so can be picked up by fail2ban in future --- ansible/roles/gateway/files/haproxy.cfg | 1 - 1 file changed, 1 deletion(-) diff --git a/ansible/roles/gateway/files/haproxy.cfg b/ansible/roles/gateway/files/haproxy.cfg index c435084..3514e2d 100644 --- a/ansible/roles/gateway/files/haproxy.cfg +++ b/ansible/roles/gateway/files/haproxy.cfg @@ -1,7 +1,6 @@ global log /dev/log local0 log /dev/log local1 notice - chroot /usr/share/haproxy pidfile /run/haproxy.pid stats timeout 30s user haproxy