Enable CSP in report only mode for the main web site

[chef.git] / roles / thorn-03.rb

diff --git a/roles/thorn-03.rb b/roles/thorn-03.rb
index cf1d721a986b9d8c1c159a9497f6b1fcc2b30d35..1ff3ef69ba36d38a3f3b51d47d253bba4ec6793d 100644 (file)
--- a/roles/thorn-03.rb
+++ b/roles/thorn-03.rb
@@ -11,11 +11,19 @@ default_attributes(
         :address => "146.179.159.167"
       }
     }
+  },
+  :sysctl => {
+    :ipv6_autoconf => {
+      :comment => "Disable IPv6 auto-configuration on internal interface",
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
+      }
+    }
   }
 )
 
 run_list(
   "role[ic]",
-  "role[hp-g5]",
   "role[web-backend]"
 )