diff --git a/ansible/roles/gateway/files/haproxy.cfg b/ansible/roles/gateway/files/haproxy.cfg index 4f2f8ec..95c8bca 100644 --- a/ansible/roles/gateway/files/haproxy.cfg +++ b/ansible/roles/gateway/files/haproxy.cfg @@ -1,48 +1,48 @@ global - log /dev/log local0 - log /dev/log local1 notice - chroot /var/lib/haproxy - stats socket /run/haproxy/admin.sock mode 660 level admin - stats timeout 30s - user haproxy - group haproxy - daemon - maxconn 10000 + log /dev/log local0 + log /dev/log local1 notice + chroot /var/lib/haproxy + stats socket /run/haproxy/admin.sock mode 660 level admin + stats timeout 30s + user haproxy + group haproxy + daemon + maxconn 10000 defaults - log global - mode http - option httplog - option dontlognull - timeout connect 10000 - timeout client 50000 - timeout server 50000 - errorfile 400 /etc/haproxy/errors/400.http - errorfile 403 /etc/haproxy/errors/403.http - errorfile 408 /etc/haproxy/errors/408.http - errorfile 500 /etc/haproxy/errors/500.http - errorfile 502 /etc/haproxy/errors/502.http - errorfile 503 /etc/haproxy/errors/503.http - errorfile 504 /etc/haproxy/errors/504.http + log global + mode http + option httplog + option dontlognull + timeout connect 10000 + timeout client 50000 + timeout server 50000 + errorfile 400 /etc/haproxy/errors/400.http + errorfile 403 /etc/haproxy/errors/403.http + errorfile 408 /etc/haproxy/errors/408.http + errorfile 500 /etc/haproxy/errors/500.http + errorfile 502 /etc/haproxy/errors/502.http + errorfile 503 /etc/haproxy/errors/503.http + errorfile 504 /etc/haproxy/errors/504.http listen https - bind *:443 - mode tcp - server default {{ wireguard.clients.intersect.ip }}:443 send-proxy + bind *:443 + mode tcp + server default {{ wireguard.clients.intersect.ip }}:443 send-proxy listen http - bind *:80 - stats enable - stats show-node - stats uri /haproxy - stats auth stats:{{ haproxy.stats_pass }} - server default {{ wireguard.clients.intersect.ip }}:80 check + bind *:80 + stats enable + stats show-node + stats uri /haproxy + stats auth stats:{{ haproxy.stats_pass }} + server default {{ wireguard.clients.intersect.ip }}:80 check {% for port in haproxy.exposed_ports %} listen expose_{{ port }} - bind *:{{ port }} - mode tcp - server default {{ wireguard.clients.intersect.ip }}:{{ port }} + bind *:{{ port }} + mode tcp + server default {{ wireguard.clients.intersect.ip }}:{{ port }} {% endfor %}