Jake Howard
4d218248fa
Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.
16 lines
417 B
Text
16 lines
417 B
Text
[haproxy]
|
|
enabled = true
|
|
bantime = 600
|
|
findtime = 10
|
|
maxretry = 100
|
|
filter = haproxy-basic
|
|
backend = systemd
|
|
journalmatch = _COMM=haproxy
|
|
port = http,https
|
|
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
|
|
|
|
[traefik]
|
|
enabled = true
|
|
filter = haproxy-basic # Not actually used
|
|
port = http,https
|
|
ignoreip = {{ wireguard.cidr }},{{ nebula.cidr }},{{ pve_hosts.internal_cidr }}
|