[pve-devel] [PATCH docs] pveproxy: document LISTEN_IP setting

[pve-devel] [PATCH docs] pveproxy: document LISTEN_IP setting

[Stoiko Ivanov]

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
---
 pveproxy.adoc | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/pveproxy.adoc b/pveproxy.adoc
index d50d04a..0ea5658 100644
--- a/pveproxy.adoc
+++ b/pveproxy.adoc
@@ -59,6 +59,24 @@ The default policy is `allow`.
 |===========================================================
 
 
+Listening IP
+------------
+
+By setting `LISTEN_IP` in `/etc/default/pveproxy` you can control to which IP
+address the daemon binds. The IP address needs to be configured on the system.
+
+This can be used to listen only to an internal interface and thus have less
+exposure to the public internet:
+
+ LISTEN_IP="192.0.2.1"
+
+Similarly you can also set a n IPv6 address:
+
+ LISTEN_IP="2001:db8:85a3::1"
+
+WARNING: The nodes in a cluster need access to pveproxy for communictation.
+It is not recommended to set `LISTEN_IP` on clustered systems.
+
 SSL Cipher Suite
 ----------------
 
-- 
2.20.1

[pve-devel] applied: [PATCH docs] pveproxy: document LISTEN_IP setting

[Thomas Lamprecht]

On 23.04.21 17:58, Stoiko Ivanov wrote:
> Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
> ---
>  pveproxy.adoc | 18 ++++++++++++++++++
>  1 file changed, 18 insertions(+)
> 


applied, thanks! Fixed a typo and noted that both pveproxy and spiceproxy are
affected by this change.


> diff --git a/pveproxy.adoc b/pveproxy.adoc
> index d50d04a..0ea5658 100644
> --- a/pveproxy.adoc
> +++ b/pveproxy.adoc
> @@ -59,6 +59,24 @@ The default policy is `allow`.
>  |===========================================================
>  
>  
> +Listening IP
> +------------
> +
> +By setting `LISTEN_IP` in `/etc/default/pveproxy` you can control to which IP
> +address the daemon binds. The IP address needs to be configured on the system.
> +
> +This can be used to listen only to an internal interface and thus have less
> +exposure to the public internet:
> +
> + LISTEN_IP="192.0.2.1"
> +
> +Similarly you can also set a n IPv6 address:
> +
> + LISTEN_IP="2001:db8:85a3::1"
> +
> +WARNING: The nodes in a cluster need access to pveproxy for communictation.

s/communictation/communication/

> +It is not recommended to set `LISTEN_IP` on clustered systems.
> +
>  SSL Cipher Suite
>  ----------------
>  
>