dnutiu/ansible-playbooks
dnutiu/ansible-playbooks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update peertube container and cil

Browse source
This commit is contained in:
Denis-Cosmin Nutiu 2025-02-06 23:02:52 +02:00
parent b8ba773cb2
commit f5d312d6b2
2 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
peertube-server/templates/cil/peertube.cil
View file

@ -16,8 +16,8 @@
(allow process container_file_t ( file ( append create getattr ioctl lock map open read rename setattr unlink write )))
(allow process container_file_t ( fifo_file ( getattr read write append ioctl lock open )))
(allow process container_file_t ( sock_file ( append getattr open read write )))
(allow process user_home_t ( dir ( add_name create getattr ioctl lock open read remove_name rmdir search setattr write )))
(allow process user_home_t ( file ( append create getattr ioctl lock map open read rename setattr unlink write )))
(allow process user_home_t ( fifo_file ( getattr read write append ioctl lock open )))
(allow process user_home_t ( sock_file ( append getattr open read write )))
(allow process default_t ( dir ( add_name create getattr ioctl lock open read remove_name rmdir search setattr write )))
(allow process default_t ( file ( append create getattr ioctl lock map open read rename setattr unlink write )))
(allow process default_t ( fifo_file ( getattr read write append ioctl lock open )))
(allow process default_t ( sock_file ( append getattr open read write )))
)

4
peertube-server/templates/services/peertube.container.j2
View file

@ -8,8 +8,8 @@ EnvironmentFile={{ base_directory }}/{{ peertube.env_file }}
Image={{ peertube.image_name}}
PublishPort=1935:1935
PublishPort=9000:9000
Volume={{ peertube.data_directory }}/data:/data
Volume={{ peertube.config_directory }}/config:/config
Volume={{ peertube.data_directory }}:/data
Volume={{ peertube.config_directory }}:/config
SecurityLabelType=peertube.process
Network=peertube.network