2022-01-21 15:12:36 +01:00
|
|
|
{% extends 'common/haproxy_base.j2' %}
|
|
|
|
|
|
|
|
|
|
{% from "common/haproxy_macros.j2" import bind_ip_tls, web_security_options, acme_challenge, csp %}
|
|
|
|
|
|
|
|
|
|
{% block frontend %}
|
|
|
|
|
frontend {{ site_name }}
|
|
|
|
|
{{ bind_ip_tls(bind_ips, 443, tls_certificate_bundle) }}
|
|
|
|
|
|
|
|
|
|
timeout http-request 10s
|
|
|
|
|
timeout http-keep-alive 4s
|
|
|
|
|
option forwardfor
|
|
|
|
|
http-request set-header X-Forwarded-Proto https
|
|
|
|
|
|
|
|
|
|
{{ web_security_options(['no_frames', 'block_xss', 'hsts', 'no_sniff']) }}
|
|
|
|
|
|
|
|
|
|
{{ acme_challenge(letsencrypt_server) }}
|
|
|
|
|
|
2022-03-23 13:33:52 +01:00
|
|
|
use_backend {{ site_name }}__refidp if { path_beg /idp/ }
|
|
|
|
|
use_backend {{ site_name }}__default
|
|
|
|
|
|
2022-03-25 13:15:53 +01:00
|
|
|
{% endblock frontend %}
|
