UNCLASSIFIED

Skip to content
Snippets Groups Projects
Commit 0faf5d71 authored by David Ivey's avatar David Ivey
Browse files

add cybbh.io to haproxy.cfg

parent 53a771af
Branches
No related merge requests found
......@@ -41,13 +41,14 @@ defaults
frontend tls_termination
mode http
bind 192.168.200.4:443 ssl crt /etc/letsencrypt/live/git.cybbh.space/master.pem crt /etc/letsencrypt/live/status.cybbh.space/master.pem
bind 192.168.200.4:443 ssl crt /etc/letsencrypt/live/git.cybbh.space/master.pem crt /etc/letsencrypt/live/status.cybbh.space/master.pem crt /etc/letsencrypt/live/cybbh.io/master.pem
bind 192.168.200.4:9000 ssl crt /etc/letsencrypt/live/graylog.cybbh.space/master.pem ca-file /etc/ssl/certs/dod-root-certs.pem verify required
reqadd X-Forwarded-Proto:\ https
http-response set-header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
http-response set-header Public-Key-Pins "pin-sha256=\"YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=\"; pin-sha256=\"sRHdihwgkaib1P1gxX8HFszlD+7/gTfNvuAybgLPNis=\"; pin-sha256=\"YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=\"; pin-sha256=\"sRHdihwgkaib1P1gxX8HFszlD+7/gTfNvuAybgLPNis=\"; pin-sha256=\"hKt/n8XrJnP3czMTKgZLx5NhiiXfYrdLodt3B3OSBA4=\"; max-age=5184000; includeSubDomains"
redirect scheme https if !{ ssl_fc }
use_backend gitlab_https if { ssl_fc_sni git.cybbh.space }
use_backend gitlab_pages_https if { ssl_fc_sni_end cybbh.io }
use_backend status_https if { ssl_fc_sni status.cybbh.space }
use_backend graylog_https if { ssl_c_verify 0 }
......@@ -58,6 +59,13 @@ backend gitlab_https
option tcplog
server git.cybbh.space 192.168.200.6:80 check inter 2000 rise 2 fall 5
backend gitlab_pages_https
mode http
balance roundrobin
option tcpka
option tcplog
server cybbh.io 192.168.200.6:10000 check inter 2000 rise 2 fall 5
backend status_https
mode http
balance roundrobin
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment