diff options
| -rw-r--r-- | terminaldweller.com/haproxy/haproxy.cfg | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/terminaldweller.com/haproxy/haproxy.cfg b/terminaldweller.com/haproxy/haproxy.cfg index 809456d..d9d6214 100644 --- a/terminaldweller.com/haproxy/haproxy.cfg +++ b/terminaldweller.com/haproxy/haproxy.cfg @@ -1,6 +1,7 @@ global log 127.0.0.1 local0 ssl-default-bind-ciphers kEECDH+aRSA+AES:kRSA+AES:+AES256:RC4-SHA:!kEDH:!LOW:!EXP:!MD5:!aNULL:!eNULL + ssl-default-bind-options no-sslv3 defaults timeout connect 5000ms @@ -23,6 +24,7 @@ frontend http acl mail-host hdr_sub(host) -i mail.terminaldweller.com acl api-host hdr_sub(host) -i api.terminaldweller.com acl chat-host hdr_sub(host) -i chat.terminaldweller.com + acl searx-host hdr_sub(host) -i searx.terminaldweller.com acl mila-api-acl url_beg /mila acl crypto-api-acl url_beg /crypto #Conditions @@ -31,6 +33,7 @@ frontend http use_backend api-crypto-backend-cert if letsencrypt-acl api-host crypto-api-acl use_backend api-mila-backend-cert if letsencrypt-acl api-host mila-api-acl use_backend certbot-backend if letsencrypt-acl !chat-host !blog-host !api-host + use_backend searx-backend if letsencrypt-acl searx-host use_backend blog-backend if blog-host use_backend mail-backend if mail-host use_backend api-backend if api-host @@ -50,6 +53,8 @@ frontend https acl blog-host-s req.ssl_sni -i blog.terminaldweller.com acl api-host-s req.ssl_sni -i api.terminaldweller.com acl mila-api-host-s req.ssl_sni -i mila.terminaldweller.com + acl searx-host-s req.ssl_sni -i searx.terminaldweller.com + acl cargo-host-s req.ssl_sni -i cargo.terminaldweller.com #Conditions use_backend mail-backend-s if mail-host-s #use_backend chat-backend-s if chat-host-s @@ -57,6 +62,8 @@ frontend https #use_backend api-crypto-backend-s if api-host-s crypto-api-acl use_backend api-crypto-backend-s if api-host-s use_backend api-mila-backend-s if mila-api-host-s + use_backend searx-backend-s if searx-host-s + use_backend cargo-backend-s if cargo-host-s frontend jabber5222 bind *:5222 @@ -250,3 +257,20 @@ backend chat-backend-c2s backend chat-cert-backend mode http server chat-cert-server 130.185.121.80:80 + +backend searx-backend + mode http + server searx-host 185.126.202.69:80 +backend searx-backend-s + timeout server 60s + timeout client 60s + mode tcp + option ssl-hello-chk + server searx-host-s 185.126.202.69:443 + +backend cargo-backend-s + timeout server 60s + timeout client 60s + mode tcp + option ssl-hello-chk + server cargo-host-s 130.185.121.80:7777 |