Validator test FE instance

This commit is contained in:
Maria Haider 2022-03-24 17:24:09 +01:00
parent f91ea45dd2
commit abc5895d8c
Signed by: mariah
GPG key ID: 7414A760CA747E57
2 changed files with 41 additions and 0 deletions

View file

@ -135,3 +135,22 @@ sunet_frontend:
haproxy_image: docker.sunet.se/eduid/haproxy
haproxy_imagetag: 'stable-tug'
frontendtools_imagetag: 'stable'
'validatortest':
site_name: 'test.validator.swedenconnect.se'
frontends:
'fe-fre-1.test.komreg.net':
ips: ['94.176.226.138', '2001:6b0:65:2::138']
'fe-tug-1.test.komreg.net':
ips: ['94.176.226.139', '2001:6b0:65:2::139']
backends:
default:
'validator-test-1.komreg.net':
ips: ['89.45.237.45']
server_args: 'ssl check verify none'
allow_ports:
- 443
letsencrypt_server: 'acme-c.sunet.se'
haproxy_image: docker.sunet.se/eduid/haproxy
haproxy_imagetag: 'stable-tug'
frontendtools_imagetag: 'stable'

View file

@ -0,0 +1,22 @@
{% extends 'common/haproxy_base.j2' %}
{% from "common/haproxy_macros.j2" import bind_ip_tls, web_security_options, acme_challenge, csp %}
{% block frontend %}
frontend {{ site_name }}
{{ bind_ip_tls(bind_ips, 443, tls_certificate_bundle) }}
stats enable
timeout http-request 10s
timeout http-keep-alive 4s
option forwardfor
http-request set-header X-Forwarded-Proto https
{{ web_security_options(['no_frames', 'block_xss', 'hsts', 'no_sniff']) }}
{{ acme_challenge(letsencrypt_server) }}
use_backend {{ site_name }}__default
{% endblock frontend %}