Actually version the ingress haproxy config

2021-06-12 17:04:21 +01:00
parent 33fcf1a9e5
commit 3485f8e1f0
5 changed files with 72 additions and 1 deletions
--- a/ansible/roles/ingress/files/haproxy.cfg
+++ b/ansible/roles/ingress/files/haproxy.cfg
@ -0,0 +1,42 @@
+global
+  log /dev/log	local0
+  log /dev/log	local1 notice
+  pidfile /run/haproxy.pid
+  stats timeout 30s
+  user haproxy
+  group haproxy
+  daemon
+  maxconn 10000
+
+defaults
+  log global
+  mode	http
+  option httplog
+  option dontlognull
+
+# Internal LAN routes
+listen http_internal
+    bind *:80
+    mode http
+    server default {{ pve_hosts.pve_docker.ip }}:80 send-proxy
+
+listen https_internal
+    bind *:443
+    mode tcp
+    server default {{ pve_hosts.pve_docker.ip }}:443 send-proxy
+
+listen matrix_internal
+    bind *:8448
+    mode tcp
+    server default {{ pve_hosts.pve_docker.ip }}:443 send-proxy
+
+# External routes
+listen http_external
+    bind *:880 accept-proxy
+    mode http
+    server default {{ pve_hosts.pve_docker.ip }}:80 send-proxy
+
+listen https_external
+    bind *:8443 accept-proxy
+    mode tcp
+    server default {{ pve_hosts.pve_docker.ip }}:443 send-proxy