From e6314d3f722e3a04698b6585a8c027f5dc2dac82 Mon Sep 17 00:00:00 2001 From: Johan Wassberg Date: Tue, 13 May 2025 14:38:00 +0200 Subject: [PATCH] Consolidated into haproxy_fidus --- .../config/common/haproxy_fidus_ds.j2 | 35 ------------------- 1 file changed, 35 deletions(-) delete mode 100644 lb-common/overlay/opt/frontend/config/common/haproxy_fidus_ds.j2 diff --git a/lb-common/overlay/opt/frontend/config/common/haproxy_fidus_ds.j2 b/lb-common/overlay/opt/frontend/config/common/haproxy_fidus_ds.j2 deleted file mode 100644 index 2058d51..0000000 --- a/lb-common/overlay/opt/frontend/config/common/haproxy_fidus_ds.j2 +++ /dev/null @@ -1,35 +0,0 @@ -{% extends 'common/haproxy_base.j2' %} - -{% from "common/haproxy_macros.j2" import bind_ip_tls, web_security_options, acme_challenge, csp %} - -{% block frontend %} -frontend {{ site_name }} - {{ bind_ip_tls(bind_ips, 443, tls_certificate_bundle) }} - - - timeout http-request 10s - timeout http-keep-alive 4s - - http-request return status 200 content-type "text/plain" file "/opt/frontend/config/common/robots.txt" hdr "cache-control" "no-cache" if { path /robots.txt } - - option forwardfor - http-request set-header X-Forwarded-Proto https - - {{ web_security_options(['hsts', 'no_sniff', 'no_cache']) }} - - {{ csp(["default-src " + ["'self'"]|join(' '), - "frame-src " + ["ds.fidus.skolverket.se"]|join(' '), - "font-src " + ["data:", "'self'", "ds.fidus.skolverket.se"]|join(' '), - "script-src " + ["'self'", "'unsafe-inline'", "'unsafe-eval'", "ds.fidus.skolverket.se"]|join(' '), - "connect-src " + ["'self'", "dsmd.fidus.sunet.se"]|join(' '), - "img-src " + ["*", "data:", "'self'"]|join(' '), - "style-src " + ["'self'", "'unsafe-inline'", "ds.fidus.skolverket.se"]|join(' '), - "object-src " + ["'none'"]|join(' '), - ]) }} - - {{ acme_challenge(letsencrypt_server) }} - - {% block usebackend %} - use_backend {{ site_name }}__default - {% endblock usebackend %} -{% endblock frontend %}