diff --git a/pveproxy.adoc b/pveproxy.adoc index 0ea5658..08c5f63 100644 --- a/pveproxy.adoc +++ b/pveproxy.adoc @@ -63,7 +63,8 @@ Listening IP ------------ By setting `LISTEN_IP` in `/etc/default/pveproxy` you can control to which IP -address the daemon binds. The IP address needs to be configured on the system. +address the `pveproxy` and `spiceproxy` daemons bind. The IP-address needs to +be configured on the system. This can be used to listen only to an internal interface and thus have less exposure to the public internet: @@ -74,8 +75,9 @@ Similarly you can also set a n IPv6 address: LISTEN_IP="2001:db8:85a3::1" -WARNING: The nodes in a cluster need access to pveproxy for communictation. -It is not recommended to set `LISTEN_IP` on clustered systems. +WARNING: The nodes in a cluster need access to `pveproxy` for communication, +possibly on different sub-nets. It is **not recommended** to set `LISTEN_IP` on +clustered systems. SSL Cipher Suite ----------------