50 lines
1.4 KiB
INI
50 lines
1.4 KiB
INI
global
|
|
log stdout format raw local0
|
|
ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11
|
|
ssl-default-bind-ciphers PROFILE=SYSTEM
|
|
|
|
defaults
|
|
log global
|
|
mode http
|
|
option httplog
|
|
timeout connect 5s
|
|
timeout client 30s
|
|
timeout server 30s
|
|
http-reuse safe
|
|
|
|
frontend fe_http
|
|
bind :80
|
|
http-request redirect scheme https code 301
|
|
|
|
frontend fe_https
|
|
bind :443 ssl crt /certs/selfsigned.pem
|
|
http-request set-header X-Forwarded-For %[src]
|
|
http-request set-header X-Forwarded-Proto https
|
|
http-response del-header Server
|
|
|
|
acl host_hosts hdr(host) -i hosts.internal
|
|
acl host_routerosbackup hdr(host) -i routerosbackup.internal
|
|
acl host_routerosupdate hdr(host) -i routerosupdate.internal
|
|
acl host_sslmonitor hdr(host) -i sslmonitor.internal
|
|
|
|
use_backend be_hosts if host_hosts
|
|
use_backend be_routerosbackup if host_routerosbackup
|
|
use_backend be_routerosupdate if host_routerosupdate
|
|
use_backend be_sslmonitor if host_sslmonitor
|
|
default_backend be_404
|
|
|
|
backend be_hosts
|
|
server s1 hosts_app:5580 check
|
|
|
|
backend be_routerosbackup
|
|
server s1 routeros_backup:5581 check
|
|
|
|
backend be_routerosupdate
|
|
server s1 routeros_update:5582 check
|
|
|
|
backend be_sslmonitor
|
|
server s1 ssl_monitor:5583 check
|
|
|
|
backend be_404
|
|
http-request deny deny_status 404
|