push

haproxy/haproxy.cfg

@@ -0,0 +1,49 @@
+global
+    log stdout format raw local0
+    ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11
+    ssl-default-bind-ciphers PROFILE=SYSTEM
+
+defaults
+    log     global
+    mode    http
+    option  httplog
+    timeout connect 5s
+    timeout client  30s
+    timeout server  30s
+    http-reuse safe
+    option httpchk GET /
+
+frontend fe_https
+    bind :443 ssl crt /certs/selfsigned.pem
+    bind :80
+
+    http-request set-header X-Forwarded-For %[src]
+    http-request set-header X-Forwarded-Proto https
+    http-response del-header Server
+
+    acl host_hosts            hdr(host) -i hosts.internal
+    acl host_routerosbackup   hdr(host) -i routerosbackup.internal
+    acl host_routerosupdate   hdr(host) -i routerosupdate.internal
+    acl host_sslmonitor       hdr(host) -i sslmonitor.internal
+
+    use_backend be_hosts            if host_hosts
+    use_backend be_routerosbackup   if host_routerosbackup
+    use_backend be_routerosupdate   if host_routerosupdate
+    use_backend be_sslmonitor       if host_sslmonitor
+    default_backend be_404
+
+# backendy po nazwach usług w tej samej sieci "intranet"
+backend be_hosts
+    server s1 hosts_app:5580 check
+
+backend be_routerosbackup
+    server s1 routeros_backup:5581 check
+
+backend be_routerosupdate
+    server s1 routeros_update:5582 check
+
+backend be_sslmonitor
+    server s1 ssl_monitor:5583 check
+
+backend be_404
+    http-request deny deny_status 404