From 33929117a9c1bfad12109276bea00783c017a3ce Mon Sep 17 00:00:00 2001
From: Ewoud Kohl van Wijngaarden <ewoud@kohlvanwijngaarden.nl>
Date: Wed, 17 Oct 2018 15:57:39 +0200
Subject: [PATCH] Allow Apache to proxy in selinux

---
 manifests/config/apache.pp | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/manifests/config/apache.pp b/manifests/config/apache.pp
index a72af4876..6e30c4a6d 100644
--- a/manifests/config/apache.pp
+++ b/manifests/config/apache.pp
@@ -165,6 +165,13 @@
         'params'        => {'retry' => '0'},
       },
     }
+
+    if $::foreman::selinux or (str2bool($::selinux) and $::foreman::selinux != false) {
+      selboolean { 'httpd_can_network_connect':
+        persistent => true,
+        value      => 'on',
+      }
+    }
   }
 
   include ::apache