52 lines
1.3 KiB
Django/Jinja
52 lines
1.3 KiB
Django/Jinja
global
|
|
log 127.0.0.1 local0 notice
|
|
user haproxy
|
|
group haproxy
|
|
tune.ssl.default-dh-param 4096
|
|
|
|
defaults
|
|
log global
|
|
mode http
|
|
retries 2
|
|
timeout connect 3000
|
|
timeout server 5000
|
|
timeout client 5000
|
|
stats enable
|
|
stats uri {{ proxy_stats_uri }}
|
|
stats realm Haproxy\ Statistics
|
|
stats auth {{ proxy_stats_user }}:{{ proxy_stats_pass }}
|
|
|
|
listen mysql-cluster
|
|
bind 0.0.0.0:3306
|
|
mode tcp
|
|
option mysql-check user haproxy_check
|
|
balance roundrobin
|
|
{% for db_server in dbservers %}
|
|
server {{ db_server }} {{ db_server }}:3306 check
|
|
{% endfor %}
|
|
|
|
frontend www-http
|
|
bind 0.0.0.0:80
|
|
reqadd X-Forwarded-Proto:\ http
|
|
default_backend www-backend
|
|
|
|
frontend www-https
|
|
bind 0.0.0.0:443 ssl crt /root/server.pem
|
|
reqadd X-Forwarded-Proto:\ https
|
|
|
|
acl host_wrestlingdev hdr(host) -i wrestlingdev.com
|
|
use_backend wrestlingdev if host_wrestlingdev
|
|
|
|
default_backend www-backend
|
|
|
|
backend www-backend
|
|
redirect scheme https if !{ ssl_fc }
|
|
errorfile 503 /root/home.html
|
|
|
|
backend wrestlingdev
|
|
redirect scheme https if !{ ssl_fc }
|
|
balance roundrobin
|
|
{% for web_server in webservers %}
|
|
server {{ web_server }} {{ web_server }}:443 check ssl verify none
|
|
{% endfor %}
|