Make nftables block various invalid TCP flag combinations

[chef.git] / cookbooks / passenger / recipes / default.rb

diff --git a/cookbooks/passenger/recipes/default.rb b/cookbooks/passenger/recipes/default.rb
index c1bcb10b020e71b07971648b227080c3d311c4f1..47b4018b711d49f2dc08d795e9fb748ed608eae8 100644 (file)
--- a/cookbooks/passenger/recipes/default.rb
+++ b/cookbooks/passenger/recipes/default.rb
@@ -55,4 +55,5 @@ prometheus_exporter "passenger" do
   port 9149
   user "root"
   environment "PASSENGER_INSTANCE_REGISTRY_DIR" => node[:passenger][:instance_registry_dir]
   port 9149
   user "root"
   environment "PASSENGER_INSTANCE_REGISTRY_DIR" => node[:passenger][:instance_registry_dir]

+  restrict_address_families "AF_UNIX"

 end
 end