Make nftables block various invalid TCP flag combinations

[chef.git] / cookbooks / passenger / recipes / default.rb

diff --git a/cookbooks/passenger/recipes/default.rb b/cookbooks/passenger/recipes/default.rb
index f8ea95808c4ac38dcb21c9d85e5ee63b69d4d1fc..47b4018b711d49f2dc08d795e9fb748ed608eae8 100644 (file)
--- a/cookbooks/passenger/recipes/default.rb
+++ b/cookbooks/passenger/recipes/default.rb
@@ -18,7 +18,7 @@
 #
 
 include_recipe "apache"
-include_recipe "apt"
+include_recipe "apt::passenger"
 include_recipe "munin"
 include_recipe "prometheus"
 include_recipe "ruby"
@@ -53,5 +53,7 @@ munin_plugin "passenger_requests"
 
 prometheus_exporter "passenger" do
   port 9149
+  user "root"
   environment "PASSENGER_INSTANCE_REGISTRY_DIR" => node[:passenger][:instance_registry_dir]
+  restrict_address_families "AF_UNIX"
 end