catbeez-selinux-httpd-can-network-connect

Status: IN

Catbeez deployments set the `httpd_can_network_connect` SELinux boolean so Caddy can reverse-proxy to localhost:8000 under SELinux enforcing mode.

Source: entries/2026/05/11/deployments-catbeez-deploy.md

Example

# From catbeez-arcade/deploy-prod.py — SELinux for Caddy reverse proxy
await ftl["catbeez-prod"].shell(cmd="setenforce 1 || true")
await ftl["catbeez-prod"].shell(
    cmd="sed -i \"s/^SELINUX=.*/SELINUX=enforcing/\" /etc/selinux/config"
)
await ftl["catbeez-prod"].shell(cmd="setsebool -P httpd_can_network_connect on")

JSON