From 2a57d15ee562c91e9b84a1723407d358c8247f83 Mon Sep 17 00:00:00 2001
From: Simon Cornet <simon@simoncor.net>
Date: Fri, 6 Mar 2026 07:56:24 +0100
Subject: [PATCH] fix: keepalived config

---
 templates/keepalived.conf.j2 | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/templates/keepalived.conf.j2 b/templates/keepalived.conf.j2
index 4342670..9574273 100644
--- a/templates/keepalived.conf.j2
+++ b/templates/keepalived.conf.j2
@@ -3,12 +3,14 @@ global_defs {
   router_id {{ keepalived_id }}
   vrrp_check_unicast_src
   vrrp_skip_check_adv_addr
+  enable_script_security
 }
 
 vrrp_script chk_script {
-  script "/usr/bin/pgrep {{ keepalived_chk_service }}"
+  script   "/usr/bin/pgrep {{ keepalived_chk_service }}"
   interval 1
   weight   2
+  user     root
 }
 
 vrrp_instance VI_1 {
@@ -22,11 +24,6 @@ vrrp_instance VI_1 {
   interface                   {{ keepalived_interface }}
   unicast_src_ip              {{ keepalived_unicast_src_ip }}
 
-  authentication {
-    auth_type PASS
-    auth_pass {{ keepalived_auth_pass }}
-  }
-
   unicast_peer {
     {{ keepalived_unicast_peer }}
   }