infrastructure/ansible/roles/gateway/files/haproxy.cfg

49 lines
1.1 KiB
INI
Raw Normal View History

2019-12-08 16:47:28 +00:00
global
log /dev/log local0
log /dev/log local1 notice
chroot /var/lib/haproxy
stats socket /run/haproxy/admin.sock mode 660 level admin
stats timeout 30s
user haproxy
group haproxy
daemon
maxconn 10000
defaults
log global
mode http
option httplog
option dontlognull
2020-01-26 18:15:19 +00:00
timeout connect 10000
timeout client 50000
timeout server 50000
2019-12-08 16:47:28 +00:00
errorfile 400 /etc/haproxy/errors/400.http
errorfile 403 /etc/haproxy/errors/403.http
errorfile 408 /etc/haproxy/errors/408.http
errorfile 500 /etc/haproxy/errors/500.http
errorfile 502 /etc/haproxy/errors/502.http
errorfile 503 /etc/haproxy/errors/503.http
errorfile 504 /etc/haproxy/errors/504.http
listen https
bind *:443
mode tcp
2020-01-17 22:56:45 +00:00
server default {{ wireguard.clients.intersect.ip }}:443 send-proxy
2019-12-08 16:47:28 +00:00
listen http
bind *:80
stats enable
stats show-node
stats uri /haproxy
stats auth stats:{{ haproxy.stats_pass }}
2020-01-17 22:56:45 +00:00
server default {{ wireguard.clients.intersect.ip }}:80 check
2019-12-08 16:47:28 +00:00
2020-01-17 22:56:45 +00:00
{% for port in haproxy.exposed_ports %}
2019-12-08 16:47:28 +00:00
2020-01-17 22:56:45 +00:00
listen expose_{{ port }}
bind *:{{ port }}
2019-12-08 16:47:28 +00:00
mode tcp
2020-01-17 22:56:45 +00:00
server default {{ wireguard.clients.intersect.ip }}:{{ port }}
2019-12-08 16:47:28 +00:00
2020-01-17 22:56:45 +00:00
{% endfor %}