infrastructure/ansible/roles/gateway/files/haproxy.cfg

global
  log /dev/log	local0
  log /dev/log	local1 notice
  pidfile /run/haproxy.pid
  stats timeout 30s
  user haproxy
  group haproxy
  daemon
  maxconn 10000

defaults
  log	global
  mode	http
  option	httplog
  option	dontlognull

listen https
  bind *:443
  mode tcp
  timeout http-request 10m
  timeout connect 10m
  timeout client  10m
  timeout server  10m
  server default {{ wireguard.clients.ingress.ip }}:8443 send-proxy-v2

listen http
  bind *:80
  stats enable
  stats show-node
  stats uri /haproxy
  stats auth stats:{{ haproxy.stats_pass }}
  timeout http-request 10m
  timeout connect 10m
  timeout client  10m
  timeout server  10m
  server default {{ wireguard.clients.ingress.ip }}:880 send-proxy-v2

listen matrix
  bind *:8448
  mode tcp
  server default {{ wireguard.clients.ingress.ip }}:8443 send-proxy-v2
Define haproxy config 2019-12-08 16:47:28 +00:00			`global`
Convert haproxy config to use spaces 2020-01-26 18:17:55 +00:00			`log /dev/log local0`
			`log /dev/log local1 notice`
Update haproxy config for use on arch 2020-05-09 20:08:27 +01:00			`pidfile /run/haproxy.pid`
Convert haproxy config to use spaces 2020-01-26 18:17:55 +00:00			`stats timeout 30s`
			`user haproxy`
			`group haproxy`
			`daemon`
			`maxconn 10000`
Define haproxy config 2019-12-08 16:47:28 +00:00
			`defaults`
Convert haproxy config to use spaces 2020-01-26 18:17:55 +00:00			`log global`
			`mode http`
			`option httplog`
			`option dontlognull`
Define haproxy config 2019-12-08 16:47:28 +00:00
			`listen https`
Convert haproxy config to use spaces 2020-01-26 18:17:55 +00:00			`bind *:443`
			`mode tcp`
Massively increase timeouts to prevent websocket issues 2020-04-17 23:04:20 +01:00			`timeout http-request 10m`
			`timeout connect 10m`
			`timeout client 10m`
			`timeout server 10m`
Use proxy protocol v2 Apparently it's better for chaining, and may be faster anyway 2021-07-01 22:28:25 +01:00			`server default {{ wireguard.clients.ingress.ip }}:8443 send-proxy-v2`
Define haproxy config 2019-12-08 16:47:28 +00:00
			`listen http`
Convert haproxy config to use spaces 2020-01-26 18:17:55 +00:00			`bind *:80`
			`stats enable`
			`stats show-node`
			`stats uri /haproxy`
			`stats auth stats:{{ haproxy.stats_pass }}`
Massively increase timeouts to prevent websocket issues 2020-04-17 23:04:20 +01:00			`timeout http-request 10m`
			`timeout connect 10m`
			`timeout client 10m`
			`timeout server 10m`
Use proxy protocol v2 Apparently it's better for chaining, and may be faster anyway 2021-07-01 22:28:25 +01:00			`server default {{ wireguard.clients.ingress.ip }}:880 send-proxy-v2`
Define haproxy config 2019-12-08 16:47:28 +00:00
Fix matrix federation Apparently this has been broken since like March... It seems communication over port 8448 is required for server-to-server comms, even if the client doesn't use it. 2021-06-12 16:47:51 +01:00			`listen matrix`
			`bind *:8448`
Convert haproxy config to use spaces 2020-01-26 18:17:55 +00:00			`mode tcp`
Use proxy protocol v2 Apparently it's better for chaining, and may be faster anyway 2021-07-01 22:28:25 +01:00			`server default {{ wireguard.clients.ingress.ip }}:8443 send-proxy-v2`