add nginx selinux to docs (#5710)
Co-authored-by: Simon Smith <simonsmith5521@gmail.com>
dinger1986 committed
Jan 18, 2024 at 22:16 UTC
ab835591db35dece606dd29a3c5148f3eb351424
1 file changed
+7
-1
docs/docs/meshcentral/index.md
+7
-1
@@ -827,6 +827,12 @@ In this example, we will:
827
- MeshCentral will read the NGINX web certificate so agents will perform correct server authentication.
828
- NGINX will be setup with long timeouts, because agents have long standard web socket connections.
829
830
+!!!note
831
+ With SELinux, NGINX reverse proxy requires 'setsebool -P httpd_can_network_relay 1'
832
+ Caution: httpd_can_network_relay only allows certain ports
833
+ Confirm you are using ports from this subset in MeshCentral
834
+ If you want to use a different port then you will need to add it to http_port_t
835
+
836
Let’s get started by configuring MeshCentral with the following values in config.json:
837
838
```json
@@ -1790,4 +1796,4 @@ MeshCentral has built-in web-based integration of SSH in the "Terminal" tab and
1796
1797
<div class="video-wrapper">
1798
<iframe width="320" height="180" src="https://www.youtube.com/embed/7qAbl2OuZEU" frameborder="0" allowfullscreen></iframe>
1793
-</div>
\ No newline at end of file
1799
+</div>