From a6be3cc3ec8494c5e57bad3351493239bc16b756 Mon Sep 17 00:00:00 2001 From: varac Date: Tue, 7 Jan 2014 17:18:22 +0100 Subject: make chttp bigcouch processes listen only on 127.0.0.1 (Bug #4889) --- manifests/init.pp | 8 +++++++- templates/bigcouch/default.ini | 2 ++ 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/manifests/init.pp b/manifests/init.pp index 5c03342..dbd75f8 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -1,4 +1,10 @@ -class couchdb ( $admin_pw = '', $admin_salt = '', $bigcouch = false, $bigcouch_cookie = '', $ednp_port = '9001' ) +class couchdb ( + $admin_pw = '', + $admin_salt = '', + $bigcouch = false, + $bigcouch_cookie = '', + $ednp_port = '9001', + $chttpd_bind_address = '0.0.0.0' ) { if $admin_pw == '' { diff --git a/templates/bigcouch/default.ini b/templates/bigcouch/default.ini index a8e7fa3..a315dda 100644 --- a/templates/bigcouch/default.ini +++ b/templates/bigcouch/default.ini @@ -22,6 +22,8 @@ docroot = /opt/bigcouch/share/www ; For more socket options, consult Erlang's module 'inet' man page. ;socket_options = [{recbuf, 262144}, {sndbuf, 262144}, {nodelay, true}] +bind_address = <%= scope.lookupvar('couchdb::chttpd_bind_address') %> + [chttps] port = 6984 -- cgit v1.2.3