jlusiardi/docker_ssl_endpoint
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
85a06c4f5d
docker_ssl_endpoint/haproxy_ssl.conf

57 lines
1.4 KiB
Plaintext
Raw Normal View History

First semiworking iteration Container can be started with empty data directory. After using docker exec the commands from the NOTES file can be used to create a first cert and additional certs after that.
2016-04-06 20:26:08 +02:00
global
chroot /var/lib/haproxy
stats socket /admin.sock mode 660 level admin
stats timeout 30s
user haproxy
group haproxy
daemon
ca-base /etc/ssl/certs
crt-base /crypt
Removed unsecure RC4 RC4-SHA was marked insecure by https://sslanalyzer.comodoca.com
2016-04-10 09:36:03 +02:00
ssl-default-bind-ciphers kEECDH+aRSA+AES:kRSA+AES:+AES256:!RC4:!kEDH:!LOW:!EXP:!MD5:!aNULL:!eNULL
First semiworking iteration Container can be started with empty data directory. After using docker exec the commands from the NOTES file can be used to create a first cert and additional certs after that.
2016-04-06 20:26:08 +02:00
ssl-default-bind-options no-sslv3
defaults
#log global
mode http
#option httplog
#option dontlognull
timeout connect 5000
timeout client 50000
timeout server 50000
frontend http
bind *:80
fixed minor issues
2016-12-30 10:05:42 +01:00
add X-Forwarded-For Header to request
2016-12-29 19:14:26 +01:00
# add X-Forwarded-For Header to request
http-request add-header X-Forwarded-For %[src]
fixed minor issues
2016-12-30 10:05:42 +01:00
reqadd X-Forwarded-Proto:\ http
add redirection to https from http if the ssl configuration is launched, we redirect to the https pages automatically.
2016-04-10 19:21:01 +02:00
redirect scheme https code 301 if !{ ssl_fc }
reordered statements
2016-12-29 19:21:37 +01:00
acl letsencrypt-acl path_beg /.well-known/acme-challenge/
First semiworking iteration Container can be started with empty data directory. After using docker exec the commands from the NOTES file can be used to create a first cert and additional certs after that.
2016-04-06 20:26:08 +02:00
use_backend letsencrypt-backend if letsencrypt-acl
reordered statements
2016-12-29 19:21:37 +01:00
First semiworking iteration Container can be started with empty data directory. After using docker exec the commands from the NOTES file can be used to create a first cert and additional certs after that.
2016-04-06 20:26:08 +02:00
default_backend www-backend
frontend https
bind *:443 ssl crt /data/haproxy/cert.pem
add X-Forwarded-For Header to request
2016-12-29 19:14:26 +01:00
# add X-Forwarded-For Header to request
http-request add-header X-Forwarded-For %[src]
fixed minor issues
2016-12-30 10:05:42 +01:00
reqadd X-Forwarded-Proto:\ https
reordered statements
2016-12-29 19:21:37 +01:00
acl letsencrypt-acl path_beg /.well-known/acme-challenge/
First semiworking iteration Container can be started with empty data directory. After using docker exec the commands from the NOTES file can be used to create a first cert and additional certs after that.
2016-04-06 20:26:08 +02:00
use_backend letsencrypt-backend if letsencrypt-acl
reordered statements
2016-12-29 19:21:37 +01:00
First semiworking iteration Container can be started with empty data directory. After using docker exec the commands from the NOTES file can be used to create a first cert and additional certs after that.
2016-04-06 20:26:08 +02:00
default_backend www-backend
backend www-backend
server one target:80
backend letsencrypt-backend
server letsencrypt 127.0.0.1:54321
Reference in New Issue Copy Permalink