dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

roles/dch-proxy: Deploy reverse HTTP/HTTPS proxy

Browse Source 
The *dch-proxy* role sets up HAProxy to provide a revers proxy for all
public-facing web services on the Pyrocufflink network. It uses the TLS
Server Name Indication (SNI) extension to determine the proper backend
server based on the name requested by the client.

For now, only Gitea is configured; the name *git.pyrocufflink.blue* is
proxied to *git0.pyrocufflink.blue*. All other names are proxied to
Myala.
This commit is contained in:
Dustin
2018-06-12 21:49:03 -05:00
parent 235468a71c
commit c5fe4a66aa
5 changed files with 53 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
roles/dch-proxy/templates/backend-myala.haproxy.cfg.j2 Normal file
View File

@@ -0,0 +1,7 @@
backend myala
server myala myala.pyrocufflink.jazz:80 check
backend myala-tls
mode tcp
server myala myala.pyrocufflink.jazz:443 check