Enable CSP in report only mode for the main web site

[chef.git] / roles / thorn-01.rb

diff --git a/roles/thorn-01.rb b/roles/thorn-01.rb
index 134e662e09bfb2940d6d99e1b58ddb3d49a0cc58..b06587b5eba12921d9fdeea9132afd843f55333a 100644 (file)
--- a/roles/thorn-01.rb
+++ b/roles/thorn-01.rb
@@ -12,13 +12,18 @@ default_attributes(
       }
     }
   },
-  :web => {
-    :readonly_database_host => "db-slave"
+  :sysctl => {
+    :ipv6_autoconf => {
+      :comment => "Disable IPv6 auto-configuration on internal interface",
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
+      }
+    }
   }
 )
 
 run_list(
   "role[ic]",
-  "role[hp-g5]",
   "role[web-backend]"
 )