108 lines
2.2 KiB
Plaintext
108 lines
2.2 KiB
Plaintext
global
|
|
log /dev/log local2
|
|
chroot /var/lib/haproxy
|
|
maxconn 4000
|
|
user haproxy
|
|
group haproxy
|
|
daemon
|
|
stats socket /var/lib/haproxy/stats mode 660 level admin
|
|
|
|
defaults
|
|
log global
|
|
mode tcp
|
|
option tcplog
|
|
option dontlognull
|
|
retries 3
|
|
timeout connect 5s
|
|
timeout client 1h
|
|
timeout server 1h
|
|
timeout check 10s
|
|
|
|
# http
|
|
frontend http_frontend
|
|
bind ip:80
|
|
mode http
|
|
option httplog
|
|
|
|
acl host_host2 hdr_end(host) -m end host2.tld
|
|
|
|
use_backend host2_http_srv if is_host2
|
|
default_backend host1_http_srv
|
|
|
|
backend host1_http_srv
|
|
mode http
|
|
server host1_srv 10.x.102.3:81 check send-proxy-v2
|
|
|
|
backend host2_http_srv
|
|
mode http
|
|
server host2_srv 10.x.200.1:81 check send-proxy-v2
|
|
|
|
# https
|
|
frontend https_frontend
|
|
bind ip:443
|
|
mode tcp
|
|
option tcplog
|
|
tcp-request inspect-delay 5s
|
|
tcp-request content accept if { req_ssl_hello_type 1 }
|
|
|
|
acl host_host2 req_ssl_sni -m end host2.tld
|
|
acl host_host3 req_ssl_sni -i host3.tld
|
|
|
|
use_backend host2_https_srv if host_host2
|
|
use_backend host3_https_srv if host_host3
|
|
default_backend host1_https_srv
|
|
|
|
backend host1_https_srv
|
|
mode tcp
|
|
server host1_srv 10.x.102.3:444 check send-proxy-v2
|
|
|
|
backend host2_https_srv
|
|
mode tcp
|
|
server host2_srv 10.x.200.1:444 check send-proxy-v2
|
|
|
|
backend host3_https_srv
|
|
mode tcp
|
|
server host3_srv x.x.x.x:443 check
|
|
|
|
# gitea
|
|
listen gitea_ssh_secure
|
|
bind ip:2211
|
|
bind 127.0.0.1:2211
|
|
mode tcp
|
|
default_backend gitea_ssh_backend
|
|
|
|
backend gitea_ssh_backend
|
|
mode tcp
|
|
server gitea_srv 10.x.103.3:22 check
|
|
|
|
# mcsmanager-daemon
|
|
listen mcsmanager_service
|
|
bind ip:24444
|
|
mode tcp
|
|
server mcs_srv 10.x.102.3:24445 check send-proxy-v2
|
|
|
|
# prosody
|
|
listen xmpp_c2s
|
|
bind ip:5222
|
|
server prosody_srv 10.x.103.9:5222 check
|
|
|
|
listen xmpp_legacy_ssl
|
|
bind ip:5223
|
|
server prosody_srv 10.x.103.9:5223 check
|
|
|
|
listen xmpp_s2s
|
|
bind ip:5269
|
|
server prosody_srv 10.x.103.9:5269 check
|
|
|
|
listen prosody_proxy65
|
|
bind ip:5000
|
|
server prosody_srv 10.x.103.9:5000 check
|
|
|
|
listen prosody_components
|
|
bind ip:5270
|
|
server prosody_srv 10.x.103.9:5270 check
|
|
|
|
listen prosody_bosh_http
|
|
bind ip:5280
|
|
server prosody_srv 10.x.103.9:5280 check
|