EUS: ensure SELinux allows connection to DB

Needed in case EUS is on different server than Yoda portal.
UtrechtUniversity · Nov 27, 2023 · 2ef4672 · 2ef4672
1 parent b8835bd
commit 2ef4672
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/roles/yoda_external_user_service/tasks/main.yml b/roles/yoda_external_user_service/tasks/main.yml
@@ -231,3 +231,13 @@
   ansible.builtin.command: 'restorecon -r /var/www/extuser'
   when: ansible_selinux.status == "enabled"
   changed_when: false
+
+
+# This is needed in case the EUS is on a different host than the Yoda portal
+# (e.g. in the full vagrant setup).
+- name: Allow EUS to connect to PostgreSQL
+  ansible.posix.seboolean:
+    name: httpd_can_network_connect
+    state: true
+    persistent: true
+  when: ansible_selinux.status == "enabled"