swedenconnect/eid-ops
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added haproxy.j2 to fe-common

Browse source
This commit is contained in:
Erik Bergström 2018-06-04 13:29:50 +02:00
parent 3886a27503
commit 6a72761971
1 changed files with 26 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
fe-common/overlay/opt/frontend/config/connector/haproxy.j2 Normal file
View file

@ -0,0 +1,26 @@
{% extends 'common/haproxy_base.j2' %}
{% from "common/haproxy_macros.j2" import bind_ip_tls, web_security_options, acme_challenge, csp %}
{% block frontend %}
frontend {{ site_name }}
{{ bind_ip_tls(bind_ips, 443, tls_certificate_bundle) }}
stats enable
timeout http-request 10s
timeout http-keep-alive 4s
option forwardfor
http-request set-header X-Forwarded-Proto https
{{ web_security_options(['no_frames', 'block_xss', 'hsts', 'no_sniff']) }}
# {{ csp(["default-src " + [csp_ext_src]|join(' '),
# "style-src 'unsafe-inline' " + [csp_ext_src]|join(' '),
# ]) }}
{{ acme_challenge(letsencrypt_server) }}
use_backend {{ site_name }}__default
{% endblock frontend %}