31 lines
768 B
Plaintext
31 lines
768 B
Plaintext
|
global
|
||
|
|
chroot /var/lib/haproxy
|
||
|
|
stats socket /admin.sock mode 660 level admin
|
||
|
|
stats timeout 30s
|
||
|
|
user haproxy
|
||
|
|
group haproxy
|
||
|
|
daemon
|
||
|
|
|
||
|
|
ca-base /etc/ssl/certs
|
||
|
|
crt-base /crypt
|
||
|
|
|
||
|
|
ssl-default-bind-ciphers kEECDH+aRSA+AES:kRSA+AES:+AES256:RC4-SHA:!kEDH:!LOW:!EXP:!MD5:!aNULL:!eNULL
|
||
|
|
ssl-default-bind-options no-sslv3
|
||
|
|
|
||
|
|
defaults
|
||
|
|
#log global
|
||
|
|
mode http
|
||
|
|
#option httplog
|
||
|
|
#option dontlognull
|
||
|
|
timeout connect 5000
|
||
|
|
timeout client 50000
|
||
|
|
timeout server 50000
|
||
|
|
|
||
|
|
frontend https
|
||
|
|
bind *:443 ssl crt /data/cert.pem
|
||
|
|
reqadd X-Forwarded-Proto:\ https
|
||
|
|
default_backend www-backend
|
||
|
|
|
||
|
|
backend www-backend
|
||
|
|
server one target:80
|