Round robin balancing, TLS 1.2 minimum, ignore down services and use tasks. dns name for direct endpoints rather than VIP

This commit is contained in:
caskd 2020-01-19 18:10:37 +01:00
parent 1f1685e457
commit ef38ec3e84
No known key found for this signature in database
GPG Key ID: 79DB21404E300A27
1 changed files with 8 additions and 6 deletions

View File

@ -1,5 +1,6 @@
global
tune.ssl.default-dh-param 2048
ssl-default-bind-options ssl-min-ver TLSv1.2
maxconn 2048
maxconnrate 40
uid 65534
@ -15,13 +16,14 @@ defaults
option tcp-smart-connect
option tcpka
option http-buffer-request
balance roundrobin
compression algo gzip
timeout http-request 10s
timeout connect 10s
timeout client 60s
timeout server 240s
timeout http-keep-alive 240s
default-server resolvers dockerdns
default-server resolvers dockerdns init-addr libc,none
resolvers dockerdns
nameserver docker 127.0.0.11:53
@ -69,23 +71,23 @@ frontend https
use_backend seedown if seedown
backend homepage
server redxen-space rxhome.s3-website.eu-central-1.amazonaws.com:80
server-template redxen-space 3 rxhome.s3-website.eu-central-1.amazonaws.com:80
http-request set-header Host rxhome.s3-website.eu-central-1.amazonaws.com
http-request set-header Connection \"\"
backend grafana
server grafana-docker tig_grafana:3000 check
server-template grafana-docker 5 tasks.tig_grafana:3000 check
option httpchk HEAD / HTTP/1.1\r\nHost:\ stats.redxen.eu
http-response set-header Content-Security-Policy default-src\ \'self\';connect-src\ \'self\';font-src\ https:\ data:\ \'self\';script-src\ \'unsafe-inline\'\ \'unsafe-eval\'\ \'self\';style-src\ \'self\'\ \'unsafe-inline\';media-src\ https:\ \'self\';img-src\ https:\ blob:\ data:\ \'self\';frame-src\ \'self\';object-src\ \'none\';block-all-mixed-content;upgrade-insecure-requests
backend git
server git-docker git_gitea:3000 check
server git-docker tasks.git_gitea:3000 check
option httpchk HEAD / HTTP/1.1\r\nHost:\ git.redxen.eu
http-response set-header Content-Security-Policy default-src\ \'self\';connect-src\ https:\ \'self\';font-src\ https:\ data:\ \'self\';script-src\ \'unsafe-inline\'\ \'unsafe-eval\'\ \'self\';style-src\ \'self\'\ \'unsafe-inline\';media-src\ https:\ \'self\';img-src\ https:\ blob:\ data:\ \'self\';frame-src\ \'self\';object-src\ \'none\';block-all-mixed-content;upgrade-insecure-requests
backend transmission
server transmission-docker seedbox_transmission:9091 check
server transmission-docker tasks.seedbox_transmission:9091 check
http-response set-header Content-Security-Policy default-src\ \'self\';connect-src\ \'self\';font-src\ https:\ data:\ \'self\';script-src\ \'self\';style-src\ \'self\'\ \'unsafe-inline\';media-src\ https:\ \'self\';img-src\ https:\ blob:\ data:\ \'self\';frame-src\ \'self\';object-src\ \'none\';block-all-mixed-content;upgrade-insecure-requests
backend seedown
server httpd-seedown seedbox_httpd:80 check
server httpd-seedown tasks.seedbox_httpd:80 check