From 0807afde570401c13f7cf2d2db073d405f34e7f3 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Tue, 5 Nov 2024 06:34:55 -0600
Subject: [PATCH] r/dch-proxy: Use separate sockets for HTTP v4/v6

Although listening on only an IPv6 socket works fine for the HTTP
front-end, it results in HAProxy logging client requests as IPv4-mapped
IPv6 addresses.  For visual processing, this is ok, but it breaks Loki's
`ip` filter.
---
 roles/dch-proxy/templates/haproxy.cfg.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/dch-proxy/templates/haproxy.cfg.j2 b/roles/dch-proxy/templates/haproxy.cfg.j2
index 1fa0e0d..120f5ba 100644
--- a/roles/dch-proxy/templates/haproxy.cfg.j2
+++ b/roles/dch-proxy/templates/haproxy.cfg.j2
@@ -5,7 +5,7 @@ acl blocklist src {{ dch_proxy_blocklist|join(' ') }}
 {% endmacro %}
 
 frontend main
-    bind :::80
+    bind *:80,:::80 v6only
 
     log-format "${HAPROXY_HTTP_LOG_FMT} %[var(txn.http_host)]"