|
|
|
@ -56,20 +56,17 @@ frontend http-in |
|
|
|
|
|
|
|
reqadd X-Forwarded-Proto:\ http |
|
|
|
|
|
|
|
acl acl_static path_beg /static/ /index.html |
|
|
|
acl acl_static path / |
|
|
|
acl acl_static_rulenode path_beg /static/rulenode/ |
|
|
|
|
|
|
|
acl transport_http_acl path_beg /api/v1/ |
|
|
|
acl letsencrypt_http_acl path_beg /.well-known/acme-challenge/ |
|
|
|
acl tb_api_acl path_beg /api/ /swagger /webjars /v2/ /static/rulenode/ |
|
|
|
|
|
|
|
redirect scheme https if !letsencrypt_http_acl !transport_http_acl { env(FORCE_HTTPS_REDIRECT) -m str true } |
|
|
|
|
|
|
|
use_backend letsencrypt_http if letsencrypt_http_acl |
|
|
|
use_backend tb-http-backend if transport_http_acl |
|
|
|
use_backend tb-web-backend if acl_static !acl_static_rulenode |
|
|
|
use_backend tb-api-backend if tb_api_acl |
|
|
|
|
|
|
|
default_backend tb-api-backend |
|
|
|
default_backend tb-web-backend |
|
|
|
|
|
|
|
frontend https_in |
|
|
|
bind *:${HTTPS_PORT} ssl crt /usr/local/etc/haproxy/default.pem crt /usr/local/etc/haproxy/certs.d ciphers ECDHE-RSA-AES256-SHA:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM |
|
|
|
@ -79,15 +76,12 @@ frontend https_in |
|
|
|
reqadd X-Forwarded-Proto:\ https |
|
|
|
|
|
|
|
acl transport_http_acl path_beg /api/v1/ |
|
|
|
|
|
|
|
acl acl_static path_beg /static/ /index.html |
|
|
|
acl acl_static path / |
|
|
|
acl acl_static_rulenode path_beg /static/rulenode/ |
|
|
|
acl tb_api_acl path_beg /api/ /swagger /webjars /v2/ /static/rulenode/ |
|
|
|
|
|
|
|
use_backend tb-http-backend if transport_http_acl |
|
|
|
use_backend tb-web-backend if acl_static !acl_static_rulenode |
|
|
|
use_backend tb-api-backend if tb_api_acl |
|
|
|
|
|
|
|
default_backend tb-api-backend |
|
|
|
default_backend tb-web-backend |
|
|
|
|
|
|
|
backend letsencrypt_http |
|
|
|
server letsencrypt_http_srv 127.0.0.1:8080 |
|
|
|
|