wok-current annotate haproxy/stuff/haproxy.cfg @ rev 25788
Mass update to fix build with gcc10 and up others packages
| author | Stanislas Leduc <shann@slitaz.org> |
|---|---|
| date | Tue Sep 30 07:43:04 2025 +0000 (3 weeks ago) |
| parents | 5926178cd6fa |
| children |
| rev | line source |
|---|---|
| shann@25728 | 1 global |
| shann@25728 | 2 maxconn 20000 |
| shann@25728 | 3 lua-load /etc/haproxy/modules/acme-webroot.lua |
| shann@25728 | 4 log 127.0.0.1 local0 |
| shann@25728 | 5 user haproxy |
| shann@25728 | 6 group haproxy |
| shann@25728 | 7 chroot /usr/share/haproxy |
| shann@25728 | 8 pidfile /run/haproxy.pid |
| shann@25728 | 9 daemon |
| shann@25728 | 10 |
| shann@25728 | 11 tune.ssl.default-dh-param 4096 |
| shann@25728 | 12 ssl-default-bind-ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS |
| shann@25728 | 13 ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets |
| shann@25728 | 14 |
| shann@25728 | 15 frontend main |
| shann@25788 | 16 bind 127.0.0.1:80 |
| shann@25728 | 17 mode http |
| shann@25728 | 18 log global |
| shann@25728 | 19 option httplog |
| shann@25728 | 20 option dontlognull |
| shann@25728 | 21 option http_proxy |
| shann@25728 | 22 option forwardfor except 127.0.0.0/8 |
| shann@25728 | 23 maxconn 8000 |
| shann@25728 | 24 timeout client 30s |
| shann@25728 | 25 |
| shann@25728 | 26 acl url_acme_http01 path_beg /.well-known/acme-challenge/ |
| shann@25728 | 27 http-request use-service lua.acme-http01 if METH_GET url_acme_http01 |
| shann@25728 | 28 |
| shann@25728 | 29 acl url_static path_beg -i /static /images /javascript /stylesheets |
| shann@25728 | 30 acl url_static path_end -i .jpg .gif .png .css .js |
| shann@25728 | 31 |
| shann@25728 | 32 use_backend static if url_static |
| shann@25728 | 33 default_backend app |
| shann@25728 | 34 |
| shann@25788 | 35 #frontend main-ssl |
| shann@25788 | 36 # bind 127.0.0.1:443 ssl crt /etc/haproxy/ssl |
| shann@25788 | 37 # mode http |
| shann@25728 | 38 |
| shann@25728 | 39 backend static |
| shann@25728 | 40 mode http |
| shann@25728 | 41 balance roundrobin |
| shann@25728 | 42 timeout connect 5s |
| shann@25728 | 43 timeout server 5s |
| shann@25728 | 44 server static 127.0.0.1:4331 check |
| shann@25728 | 45 |
| shann@25728 | 46 backend app |
| shann@25728 | 47 mode http |
| shann@25728 | 48 balance roundrobin |
| shann@25728 | 49 timeout connect 5s |
| shann@25728 | 50 timeout server 30s |
| shann@25728 | 51 timeout queue 30s |
| shann@25728 | 52 server app1 127.0.0.1:5001 check |
| shann@25728 | 53 server app2 127.0.0.1:5002 check |
| shann@25728 | 54 server app3 127.0.0.1:5003 check |
| shann@25728 | 55 server app4 127.0.0.1:5004 check |