Dustin C. Hatch
909c8e7a03
Debian does not support system-wide SSL cipher suite profiles of course, so these options need to be specified explicitly when deploying HAProxy on Debian-based machines.
24 lines
748 B
Django/Jinja
24 lines
748 B
Django/Jinja
#---------------------------------------------------------------------
|
|
# Global settings
|
|
#---------------------------------------------------------------------
|
|
global
|
|
log /dev/log local0
|
|
|
|
pidfile /var/run/haproxy.pid
|
|
maxconn 4000
|
|
user haproxy
|
|
group haproxy
|
|
daemon
|
|
|
|
# turn on stats unix socket
|
|
stats socket /var/lib/haproxy/stats
|
|
|
|
# utilize system-wide crypto-policies
|
|
ssl-default-bind-ciphers {{ haproxy_ssl_default_ciphers }}
|
|
{% if haproxy_ssl_default_server_ciphers|d %}
|
|
ssl-default-server-ciphers {{ haproxy_ssl_default_server_ciphers }}
|
|
{% endif %}
|
|
{% if haproxy_ssl_default_bind_options %}
|
|
ssl-default-bind-options {{ haproxy_ssl_default_bind_options }}
|
|
{% endif %}
|