-
Notifications
You must be signed in to change notification settings - Fork 6
/
dev_haproxy.cfg
69 lines (55 loc) · 2.57 KB
/
dev_haproxy.cfg
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
global
# set to /tmp due to running as user haproxy and need to write to directory to create the sock file
stats socket /tmp/api.sock user haproxy group haproxy mode 660 level admin expose-fd listeners
log stdout format raw local0 info
maxconn 2000 # Value must be set on latest haproxy versions
defaults
mode http
timeout client 10s
timeout connect 5s
timeout server 10s
timeout http-request 10s
log global
resolvers docker_resolver
nameserver dns 127.0.0.11:53
frontend stats
bind *:8404
stats enable
stats uri /
stats refresh 10s
#frontend front_http
# bind 0.0.0.0:80
# bind :::80
#
# redirect scheme https code 301
frontend myfrontend
# bind *:443 ssl crt /etc/ssl/vc.pem alpn h2,http/1.1
bind *:80
stats enable
timeout http-request 10s
timeout http-keep-alive 4s
#http-request redirect scheme https unless { ssl_fc }
# http-request set-header X-SSL-Client-Cert %{+Q}[ssl_c_der,base64]
# http-request set-header X-SSL-Client-CN %{+Q}[ssl_c_s_dn(cn)]
# http-request set-header X-SSL-Client-Verify %[ssl_c_verify]
use_backend issuer if { path /issuer } || { path_beg /issuer/ }
use_backend verifier if { path /verifier } || { path_beg /verifier/ }
use_backend datastore if { path /datastore } || { path_beg /datastore/ }
use_backend registry if { path /registry } || { path_beg /registry/ }
use_backend jaeger if { path /jaeger } || { path_beg /jaeger/ }
backend issuer
http-request replace-path /issuer(/)?(.*) /\2
server issuer_server issuer:8080 resolvers docker_resolver resolve-prefer ipv4
# server issuer_server vc_issuer:8080 ssl verify optional crt-ignore-err all ca-file /cert/ladok_utv_dev.crt resolvers docker_resolver resolve-prefer ipv4
backend verifier
http-request replace-path /verifier(/)?(.*) /\2
server verifier_server verifier:8080 resolvers docker_resolver resolve-prefer ipv4
backend datastore
http-request replace-path /datastore(/)?(.*) /\2
server datastore_server datastore:8080 resolvers docker_resolver resolve-prefer ipv4
backend registry
http-request replace-path /registry(/)?(.*) /\2
server registry_server registry:8080 resolvers docker_resolver resolve-prefer ipv4
backend jaeger
http-request replace-path /jaeger(/)?(.*) /\2
server jaeger_server jaeger:16686 resolvers docker_resolver resolve-prefer ipv4