drop proxmox routing
This commit is contained in:
@@ -12,8 +12,6 @@ data:
|
||||
/etc/haproxy/certs/ceph-unkin-net/tls.crt
|
||||
|
||||
fe_http.map: |
|
||||
au-syd1-pve.main.unkin.net be_ausyd1pve_web
|
||||
au-syd1-pve-api.main.unkin.net be_ausyd1pve_api
|
||||
sonarr.main.unkin.net be_sonarr
|
||||
radarr.main.unkin.net be_radarr
|
||||
lidarr.main.unkin.net be_lidarr
|
||||
@@ -31,8 +29,6 @@ data:
|
||||
auth.unkin.net be_k8s_kanidm
|
||||
|
||||
fe_https.map: |
|
||||
au-syd1-pve.main.unkin.net be_ausyd1pve_web
|
||||
au-syd1-pve-api.main.unkin.net be_ausyd1pve_api
|
||||
sonarr.main.unkin.net be_sonarr
|
||||
radarr.main.unkin.net be_radarr
|
||||
lidarr.main.unkin.net be_lidarr
|
||||
@@ -98,7 +94,6 @@ data:
|
||||
mode http
|
||||
description Global HTTPS Frontend
|
||||
acl acl-letsencrypt path_beg /.well-known/acme-challenge/
|
||||
acl acl_ausyd1pve req.hdr(host) -i au-syd1-pve.main.unkin.net
|
||||
acl acl_sonarr req.hdr(host) -i sonarr.main.unkin.net
|
||||
acl acl_radarr req.hdr(host) -i radarr.main.unkin.net
|
||||
acl acl_lidarr req.hdr(host) -i lidarr.main.unkin.net
|
||||
@@ -114,11 +109,8 @@ data:
|
||||
acl acl_stalwart_webadmin req.hdr(host) -i autoconfig.main.unkin.net
|
||||
acl acl_stalwart_webadmin req.hdr(host) -i autodiscovery.main.unkin.net
|
||||
acl acl_kanidm req.hdr(host) -i auth.unkin.net
|
||||
acl acl_internalsubnets src 198.18.0.0/16 10.10.12.0/24
|
||||
http-request set-header X-Forwarded-Proto https
|
||||
http-request set-header X-Real-IP %[src]
|
||||
http-request deny if { hdr_dom(host) -i au-syd1-pve.main.unkin.net } !acl_internalsubnets
|
||||
http-response set-header X-Frame-Options DENY if acl_ausyd1pve
|
||||
http-response set-header X-Frame-Options DENY if acl_sonarr
|
||||
http-response set-header X-Frame-Options DENY if acl_radarr
|
||||
http-response set-header X-Frame-Options DENY if acl_lidarr
|
||||
@@ -185,31 +177,6 @@ data:
|
||||
tcp-request inspect-delay 5s
|
||||
tcp-request content accept if { req_len 0 }
|
||||
|
||||
backend be_ausyd1pve_api
|
||||
description Backend for au-syd1 pve cluster (API only)
|
||||
balance roundrobin
|
||||
http-request set-header X-Forwarded-Port %[dst_port]
|
||||
http-request add-header X-Forwarded-Proto https if { dst_port 443 }
|
||||
http-reuse always
|
||||
option httpchk GET /
|
||||
option forwardfor
|
||||
option http-keep-alive
|
||||
option prefer-last-server
|
||||
redirect scheme https if !{ ssl_fc }
|
||||
|
||||
backend be_ausyd1pve_web
|
||||
description Backend for au-syd1 pve cluster (Web)
|
||||
balance roundrobin
|
||||
cookie SRVNAME insert indirect nocache
|
||||
http-request set-header X-Forwarded-Port %[dst_port]
|
||||
http-request add-header X-Forwarded-Proto https if { dst_port 443 }
|
||||
http-reuse always
|
||||
option httpchk GET /
|
||||
option forwardfor
|
||||
option http-keep-alive
|
||||
option prefer-last-server
|
||||
redirect scheme https if !{ ssl_fc }
|
||||
|
||||
backend be_ceph_dashboard
|
||||
description Backend for Ceph Dashboard from Mgr instances
|
||||
balance roundrobin
|
||||
|
||||
Reference in New Issue
Block a user