{"id":"catbeez-selinux-httpd-can-network-connect","text":"Catbeez deployments set the `httpd_can_network_connect` SELinux boolean so Caddy can reverse-proxy to localhost:8000 under SELinux enforcing mode.","truth_value":"IN","source":"entries/2026/05/11/deployments-catbeez-deploy.md","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{"example":"# From catbeez-arcade/deploy-prod.py — SELinux for Caddy reverse proxy\nawait ftl[\"catbeez-prod\"].shell(cmd=\"setenforce 1 || true\")\nawait ftl[\"catbeez-prod\"].shell(\n    cmd=\"sed -i \\\"s/^SELINUX=.*/SELINUX=enforcing/\\\" /etc/selinux/config\"\n)\nawait ftl[\"catbeez-prod\"].shell(cmd=\"setsebool -P httpd_can_network_connect on\")"},"explanation":{"steps":[{"node":"catbeez-selinux-httpd-can-network-connect","truth_value":"IN","reason":"premise"}]}}