Merge pull request #7 from nginxinc/selinux-doc-updates

var and documentation updates

Author: aknot242

README.md

@@ -100,6 +100,13 @@ This is a sample playbook file for using the role to install NGINX App Protect o
     # Default is present.
     app_protect_state: present
 
+    # OPTIONAL: Installs a specific version of NGINX App Protect
+    app_protect_version: 21
+
+    # Enable enforcing selinux (you may need to open ports on your own)
+    # WARNING: If this is set to false and you are installing NGINX Protect on a system with SELinux enforced, NGINX App Protect may fail to load. 
+    app_protect_selinux: false
+
     # The installation of NGINX App Protect includes a base signature set, which may be out of date. 
     # This option installs the latest NGINX App Protect signatures.
     app_protect_install_signatures: true

defaults/main.yml

@@ -9,9 +9,12 @@
 # Default is present.
 app_protect_state: present
 
-# # OPTIONAL - Installs a specific version of NGINX App Protect
+# # OPTIONAL: Installs a specific version of NGINX App Protect
 # app_protect_version: 20
 
+# Enable enforcing selinux (you may need to open ports on your own)
+app_protect_selinux: false
+
 # The installation of NGINX App Protect includes a base signature set, which may be out of date. 
 # This option installs the latest NGINX App Protect signatures.
 app_protect_install_signatures: true
@@ -84,6 +87,3 @@ log_policy_syslog_target: 127.0.0.1:514
 
 nginx_demo_workload_protocol: http://
 nginx_demo_workload_host: 10.1.1.1:8080
-
-# Enable enforcing selinux (you may need to open ports on your own)
-nginx_selinux: false

tasks/prerequisites/setup-centos.yml

@@ -6,4 +6,4 @@
 
 - name: "(Install: CentOS) Setup SELinux"
   import_tasks: setup-selinux.yml
-  when: nginx_selinux
+  when: app_protect_selinux

tasks/prerequisites/setup-selinux.yml

@@ -8,7 +8,7 @@
   selinux:
     state: permissive
     policy: targeted
-  when: nginx_selinux
+  when: app_protect_selinux
 
 - name: "(Install: SELinux: Booleans) Allow HTTP network connection"
   seboolean: