From eceb918fd1160f80d27e3460e338d6d406e5fba4 Mon Sep 17 00:00:00 2001 From: nd Date: Sat, 14 Aug 2021 16:21:47 +0100 Subject: [PATCH 1/2] fix debian stretch support --- templates/stunnel-client.conf.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/stunnel-client.conf.j2 b/templates/stunnel-client.conf.j2 index 136d397..ad40776 100644 --- a/templates/stunnel-client.conf.j2 +++ b/templates/stunnel-client.conf.j2 @@ -2,9 +2,9 @@ sslVersion = TLSv1.2 {% else %} sslVersionMin = TLSv1.2 -{% endif %} options = SINGLE_ECDH_USE options = SINGLE_DH_USE +{% endif %} setuid = stunnel4 setgid = stunnel4 From 5b50d7e9134b4ecef903e9f8f32548549739c701 Mon Sep 17 00:00:00 2001 From: nd Date: Tue, 17 Aug 2021 15:34:16 +0100 Subject: [PATCH 2/2] added cap net admin handling --- tasks/main.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/tasks/main.yml b/tasks/main.yml index b9eb34e..b77bc96 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -17,6 +17,10 @@ - name: install blackbox exporter apt: pkg: prometheus-blackbox-exporter + - name: handle cap cap_net_raw, needed for icmp + community.general.capabilities: + path: /usr/bin/prometheus-blackbox-exporter + capability: cap_net_raw+ep - name: wrtie blackbox exporter service config notify: restart blackbox exporter template: