On Wednesday, June 20, 2018 at 7:54:20 AM UTC-5, Jakov Sosic wrote:
>
> Hi guys,
>
> [root@host ~]# cat /etc/puppetlabs/puppetserver/conf.d/webserver.conf
> webserver: {
> access-log-config: /etc/puppetlabs/puppetserver/request-logging.xml
> client-auth: want
> ssl-host: 0.0.0.0
> ssl-port: 8140
> }
>
>
> I wonder if it's possible, and if yes, how, to set ssl-host to two IP
> addreses / interfaces?
>
> I don't want puppet to listen on 0.0.0.0, cause I have 3 interfaces.
>
>
To the best of my knowledge, your options are
- bind to *all* of the machine's addresses
- bind to one specific address
- run multiple puppetserver instances
If you want to exclude one interface out of several then perhaps it would
be easier to handle that at a different level. For example, let
puppetserver bind to all addresses, but use your firewall to block service
at those addresses where you don't want to receive catalog requests.
John
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/5f89f4e8-610a-43bc-8a53-0fb4b543110e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
