diff --git a/ansible/roles/horizon/templates/horizon.conf.j2 b/ansible/roles/horizon/templates/horizon.conf.j2 index 3d7aa08ec420055e889db7fc6973c4e220d5fc5c..953d070b545d028556d66c75bb5bfb3e90300d48 100644 --- a/ansible/roles/horizon/templates/horizon.conf.j2 +++ b/ansible/roles/horizon/templates/horizon.conf.j2 @@ -40,6 +40,9 @@ TraceEnable off SSLCertificateFile /etc/horizon/certs/horizon-cert.pem SSLCertificateKeyFile /etc/horizon/certs/horizon-key.pem {% endif %} +{% if horizon_httpd_limitrequestbody is defined %} + LimitRequestBody {{ horizon_httpd_limitrequestbody }} +{% endif %} </VirtualHost> <IfModule mod_deflate.c> diff --git a/releasenotes/notes/add-horizon-limitrequestbody-4f79433fa2cf1f6d.yaml b/releasenotes/notes/add-horizon-limitrequestbody-4f79433fa2cf1f6d.yaml new file mode 100644 index 0000000000000000000000000000000000000000..7b93905f15dbb2a30e059d9f742015abb358ff77 --- /dev/null +++ b/releasenotes/notes/add-horizon-limitrequestbody-4f79433fa2cf1f6d.yaml @@ -0,0 +1,9 @@ +--- +features: + - | + Since CVE-2022-29404 is fixed the default value for the LimitRequestBody + directive in the Apache HTTP Server has been changed from 0 (unlimited) to + 1073741824 (1 GiB). This limits the size of images (for example) uploaded + in Horizon. Now this limit can be configured via + ``horizon_httpd_limitrequestbody``. + `LP#2012588 <https://bugs.launchpad.net/kolla-ansible/+bug/2012588>`__