Port custom firewall rule to nftables

[chef.git] / cookbooks / passenger / recipes / default.rb

diff --git a/cookbooks/passenger/recipes/default.rb b/cookbooks/passenger/recipes/default.rb
index 74eba83eb0fb5ad84c1dab4bf339d1783f910688..47b4018b711d49f2dc08d795e9fb748ed608eae8 100644 (file)
--- a/cookbooks/passenger/recipes/default.rb
+++ b/cookbooks/passenger/recipes/default.rb
@@ -53,5 +53,7 @@ munin_plugin "passenger_requests"
 
 prometheus_exporter "passenger" do
   port 9149
 
 prometheus_exporter "passenger" do
   port 9149

+  user "root"

   environment "PASSENGER_INSTANCE_REGISTRY_DIR" => node[:passenger][:instance_registry_dir]
   environment "PASSENGER_INSTANCE_REGISTRY_DIR" => node[:passenger][:instance_registry_dir]

+  restrict_address_families "AF_UNIX"

 end
 end