aports/software-configs/haproxy-redxen-config/main.cfg

94 lines
2.9 KiB
INI
Raw Normal View History

2020-10-31 15:34:48 +00:00
global
maxconn 2048
maxconnrate 40
defaults
mode http
retries 1
option forwardfor
option http-keep-alive
option tcp-smart-connect
option tcpka
balance roundrobin
compression algo gzip
timeout http-request 10s
timeout connect 10s
timeout client 60s
timeout server 240s
timeout http-keep-alive 240s
default-server resolvers local init-addr libc,none resolve-opts prevent-dup-ip check
2020-11-20 16:31:49 +00:00
errorfile 400 /etc/haproxy/errorpages/400.http
errorfile 403 /etc/haproxy/errorpages/403.http
errorfile 408 /etc/haproxy/errorpages/408.http
errorfile 500 /etc/haproxy/errorpages/500.http
errorfile 502 /etc/haproxy/errorpages/502.http
errorfile 503 /etc/haproxy/errorpages/503.http
errorfile 504 /etc/haproxy/errorpages/504.http
2020-10-31 15:34:48 +00:00
resolvers local
nameserver unbound 127.0.0.1:53
resolve_retries 2
timeout retry 300ms
hold other 100ms
hold refused 100ms
hold nx 100ms
hold timeout 3s
hold valid 5s
listen murmur
2020-10-31 15:34:48 +00:00
mode tcp
bind ipv4@*:64738,ipv6@*:64738
option tcp-check
server-template murmur 1 _murmur._tcp.routinginfo.redxen.localhost
2020-10-31 15:34:48 +00:00
frontend http
mode http
bind ipv4@:443,ipv6@:443 ssl crt /etc/ssl/redxen/letsencrypt/fullchain.crt alpn h2,http/1.1
2020-11-20 16:31:49 +00:00
bind ipv4@:80,ipv6@:80
2020-10-31 15:34:48 +00:00
acl root url /
2020-11-20 16:31:49 +00:00
use_backend backend-root if { hdr(host) -i redxen.eu }
use_backend backend-transmission if { hdr_beg(host) -i seed }
redirect prefix /web code 302 if { hdr_beg(host) -i seed } root
use_backend backend-grafana if { hdr_beg(host) -i stats }
use_backend backend-pleroma if { hdr_beg(host) -i social }
use_backend backend-gitea if { hdr_beg(host) -i git }
use_backend backend-seedown if { hdr_beg(host) -i sd }
2020-10-31 15:34:48 +00:00
http-response add-header X-Forwarded-Proto https
http-response set-header X-XSS-Protection 1;\ mode=block
http-response set-header X-Content-Type-Options nosniff
http-response set-header Referrer-Policy no-referrer-when-downgrade
http-response set-header Strict-Transport-Security max-age=31536000;\ includeSubDomains;\ preload
2020-11-20 16:31:49 +00:00
backend backend-root
server-template root 1 _root._tcp.routinginfo.redxen.localhost
option httpchk HEAD / HTTP/1.1
backend backend-transmission
server-template transmission 1 _transmission._tcp.routinginfo.redxen.localhost
option httpchk HEAD / HTTP/1.1
backend backend-grafana
server-template grafana 5 _grafana._tcp.routinginfo.redxen.localhost
option httpchk HEAD / HTTP/1.1
http-check send hdr Host stats.redxen.eu
backend backend-seedown
server-template seedown 1 _seedown._tcp.routinginfo.redxen.localhost
option httpchk HEAD / HTTP/1.1
backend backend-pleroma
server-template pleroma 1 _pleroma._tcp.routinginfo.redxen.localhost
option httpchk HEAD / HTTP/1.1
backend backend-gitea
server-template gitea 1 _gitea._tcp.routinginfo.redxen.localhost
option httpchk HEAD / HTTP/1.1