aboutsummaryrefslogtreecommitdiffstats
path: root/matrix-server/haproxy/haproxy.cfg
blob: 2afa3fb23c5a49e8648cf4526c3f9708949eb3cd (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
global
  stats socket :9999 level admin expose-fd listeners
  log stdout format raw local0
  ssl-default-bind-ciphers kEECDH+aRSA+AES:kRSA+AES:+AES256:RC4-SHA:!kEDH:!LOW:!EXP:!MD5:!aNULL:!eNULL

frontend http
  bind :80
  http-request redirect scheme https unless { ssl_fc }
  acl certbot path_beg /.well-known/acme-challenge/
  use_backend certbot if certbot

frontend https
  bind :::443 v4v6 ssl crt /etc/certificates strict-sni alpn h2.http/1.1
  acl matrix-host hdr(host) -i matrix.example.com
  acl matrix-path path_beg /_matrix
  acl matrix-path path_beg /_synpase/client
  use_backend matrix if matrix-host matrix-path

frontend matrix-federation
 bind :::8448 v4v6 ssl crt /etc/certificates alpn h2.http/1.1
 default_backend matrix

resolvers docker_resolver
  nameserver dns 127.0.0.11:53

backend matrix
  server matrix synapse:8008

backend certbot
  server certbot certbot:380