pveproxy: document LISTEN_IP setting

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>

diff --git a/pveproxy.adoc b/pveproxy.adoc
index d50d04a967f540627daea77c14f8623eeb7f0cfb..0ea5658eb380072f0eda796bcac6273c2bfb5210 100644 (file)
--- a/pveproxy.adoc
+++ b/pveproxy.adoc
@@ -59,6 +59,24 @@ The default policy is `allow`.
 |===========================================================
 
 
+Listening IP
+------------
+
+By setting `LISTEN_IP` in `/etc/default/pveproxy` you can control to which IP
+address the daemon binds. The IP address needs to be configured on the system.
+
+This can be used to listen only to an internal interface and thus have less
+exposure to the public internet:
+
+ LISTEN_IP="192.0.2.1"
+
+Similarly you can also set a n IPv6 address:
+
+ LISTEN_IP="2001:db8:85a3::1"
+
+WARNING: The nodes in a cluster need access to pveproxy for communictation.
+It is not recommended to set `LISTEN_IP` on clustered systems.
+
 SSL Cipher Suite
 ----------------