dendi-wang/thingsboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update haproxy config

Browse Source
This commit is contained in:
Igor Kulikov 2020-02-27 11:05:59 +02:00
parent 2fcc907769
commit c14d36d4ea
1 changed files with 6 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
docker/haproxy/config/haproxy.cfg
View File

@ -56,20 +56,17 @@ frontend http-in
reqadd X-Forwarded-Proto:\ http reqadd X-Forwarded-Proto:\ http
acl acl_static path_beg /static/ /index.html
acl acl_static path /
acl acl_static_rulenode path_beg /static/rulenode/
acl transport_http_acl path_beg /api/v1/ acl transport_http_acl path_beg /api/v1/
acl letsencrypt_http_acl path_beg /.well-known/acme-challenge/ acl letsencrypt_http_acl path_beg /.well-known/acme-challenge/
acl tb_api_acl path_beg /api/ /swagger /webjars /v2/ /static/rulenode/
redirect scheme https if !letsencrypt_http_acl !transport_http_acl { env(FORCE_HTTPS_REDIRECT) -m str true } redirect scheme https if !letsencrypt_http_acl !transport_http_acl { env(FORCE_HTTPS_REDIRECT) -m str true }
use_backend letsencrypt_http if letsencrypt_http_acl use_backend letsencrypt_http if letsencrypt_http_acl
use_backend tb-http-backend if transport_http_acl use_backend tb-http-backend if transport_http_acl
use_backend tb-web-backend if acl_static !acl_static_rulenode use_backend tb-api-backend if tb_api_acl
default_backend tb-api-backend default_backend tb-web-backend
frontend https_in frontend https_in
bind *:${HTTPS_PORT} ssl crt /usr/local/etc/haproxy/default.pem crt /usr/local/etc/haproxy/certs.d ciphers ECDHE-RSA-AES256-SHA:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM bind *:${HTTPS_PORT} ssl crt /usr/local/etc/haproxy/default.pem crt /usr/local/etc/haproxy/certs.d ciphers ECDHE-RSA-AES256-SHA:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM
@ -79,15 +76,12 @@ frontend https_in
reqadd X-Forwarded-Proto:\ https reqadd X-Forwarded-Proto:\ https
acl transport_http_acl path_beg /api/v1/ acl transport_http_acl path_beg /api/v1/
acl tb_api_acl path_beg /api/ /swagger /webjars /v2/ /static/rulenode/
acl acl_static path_beg /static/ /index.html
acl acl_static path /
acl acl_static_rulenode path_beg /static/rulenode/
use_backend tb-http-backend if transport_http_acl use_backend tb-http-backend if transport_http_acl
use_backend tb-web-backend if acl_static !acl_static_rulenode use_backend tb-api-backend if tb_api_acl
default_backend tb-api-backend default_backend tb-web-backend
backend letsencrypt_http backend letsencrypt_http
server letsencrypt_http_srv 127.0.0.1:8080 server letsencrypt_http_srv 127.0.0.1:8080