[feature] Added variable to configure FreeRADIUS listen address

openwisp · Oct 17, 2022 · 6a298a1 · 6a298a1
1 parent 523edc4
commit 6a298a1
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -1129,6 +1129,9 @@ Below are listed all the variables you can customize (you may also want to take
     # Sets the source path of the template that contains freeradius site configuration.
     # Defaults to "templates/freeradius/openwisp_site.j2" shipped in the role.
     freeradius_openwisp_site_template_src: custom_freeradius_site.j2
+    # FreeRADIUS listen address for the openwisp_site.
+    # Defaults to "*", i.e. listen on all interfaces.
+    freeradius_openwisp_site_listen_ipaddr: "10.8.0.1"
     cron_delete_old_notifications: "'hour': 0, 'minute': 0"
     cron_deactivate_expired_users: "'hour': 0, 'minute': 5"
     cron_delete_old_users: "'hour': 0, 'minute': 10"

diff --git a/defaults/main.yml b/defaults/main.yml
@@ -177,6 +177,7 @@ freeradius_rest:
     url: "https://{{ inventory_hostname }}/api/v1/freeradius"
 freeradius_expire_attr_after_seconds: 86400
 freeradius_safe_characters: "+@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"
+freeradius_openwisp_site_listen_ipaddr: "*"
 cron_delete_old_notifications: "'hour': 0, 'minute': 0"
 cron_deactivate_expired_users: "'hour': 0, 'minute': 5"
 cron_delete_old_users: "'hour': 0, 'minute': 10"

diff --git a/templates/freeradius/openwisp_site.j2 b/templates/freeradius/openwisp_site.j2
@@ -1,7 +1,7 @@
 server default {
     listen {
         type = auth
-        ipaddr = *
+        ipaddr = {{ freeradius_openwisp_site_listen_ipaddr }}
         port = 0
         limit {
             max_connections = 16
@@ -11,7 +11,7 @@ server default {
     }
 
     listen {
-        ipaddr = *
+        ipaddr = {{ freeradius_openwisp_site_listen_ipaddr }}
         port = 0
         type = acct
         limit {}