infrastructure/ansible/roles/ingress/files/haproxy.cfg
Jake Howard edc5c325b7
Correctly check hostname against PVE hosts
Some of the hostnames have `-` in instead, which caused issues with the SSH config detecting which users to allow
2021-08-23 19:56:04 +01:00

38 lines
744 B
INI

global
log /dev/log local0
log /dev/log local1 notice
pidfile /run/haproxy.pid
stats timeout 30s
user haproxy
group haproxy
daemon
maxconn 10000
defaults
log global
mode http
option httplog
option dontlognull
# Internal LAN routes
listen http_internal
bind *:80
mode http
server default {{ pve_hosts.docker.ip }}:80 send-proxy-v2
listen https_internal
bind *:443
mode tcp
server default {{ pve_hosts.docker.ip }}:443 send-proxy-v2
listen matrix_internal
bind *:8448
mode tcp
server default {{ pve_hosts.docker.ip }}:443 send-proxy-v2
# External routes
listen https_external
bind *:8443 accept-proxy
mode tcp
server default {{ pve_hosts.docker.ip }}:443 send-proxy-v2