Commit 744d54f4 authored by Maciej Delmanowski's avatar Maciej Delmanowski

[docs] Mention the firewall requirement in Icinga

parent 2e8e4797
......@@ -26,6 +26,12 @@ DNS and PKI configuration you might encounter.
Icinga 2 inter-node communication and PKI
You might need to allow connections to the Icinga API interface, by default on
port 5665, through the firewall. You can do this by setting the
:envvar:`icinga__allow` or its group or host equivalent in the inventory.
Usually only the master host needs the access opened, unless you plan to
initiate connections from the master to the clients.
Icinga 2 uses X.509 certificates for internal communication between the nodes,
therefore the correct DNS records for the hosts are required. When DNS is not
configured properly beforehand, communication between the cluster nodes can be
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment