deflax/television
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add LF on last line and move tcp-request before http-request

Browse source
This commit is contained in:
Daniel Krastev 2025-02-05 20:41:04 +02:00
parent 3f22da7844
commit 1cfadfa2fe
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
config/haproxy/haproxy.cfg
View file

@ -35,6 +35,9 @@ frontend web
bind :80 bind :80
bind :443 ssl crt /certificates strict-sni bind :443 ssl crt /certificates strict-sni
tcp-request inspect-delay 5s
tcp-request content accept if { req_ssl_hello_type 1 }
http-request return status 200 content-type text/plain lf-string "%[path,field(-1,/)].${ACCOUNT_THUMBPRINT}\n" if { path_beg '/.well-known/acme-challenge/' } http-request return status 200 content-type text/plain lf-string "%[path,field(-1,/)].${ACCOUNT_THUMBPRINT}\n" if { path_beg '/.well-known/acme-challenge/' }
http-request redirect scheme https code 301 unless { ssl_fc } http-request redirect scheme https code 301 unless { ssl_fc }
@ -53,9 +56,6 @@ frontend web
# max-age is mandatory. 16000000 seconds is approximately 6 months. Use a low value during testing. # max-age is mandatory. 16000000 seconds is approximately 6 months. Use a low value during testing.
http-response set-header Strict-Transport-Security "max-age=16000000; includeSubDomains; preload;" http-response set-header Strict-Transport-Security "max-age=16000000; includeSubDomains; preload;"
tcp-request inspect-delay 5s
tcp-request content accept if { req_ssl_hello_type 1 }
# ACLS # ACLS
acl is_base ssl_fc_sni -i "${BASE_URL}" acl is_base ssl_fc_sni -i "${BASE_URL}"
acl is_stream ssl_fc_sni -i "stream.${BASE_URL}" acl is_stream ssl_fc_sni -i "stream.${BASE_URL}"