drop proxmox routing
ci/woodpecker/pr/vector-test Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful

This commit is contained in:
2026-09-26 17:45:40 +10:00
parent 02ed176563
commit be5270e7a9
-33
View File
@@ -12,8 +12,6 @@ data:
/etc/haproxy/certs/ceph-unkin-net/tls.crt
fe_http.map: |
au-syd1-pve.main.unkin.net be_ausyd1pve_web
au-syd1-pve-api.main.unkin.net be_ausyd1pve_api
sonarr.main.unkin.net be_sonarr
radarr.main.unkin.net be_radarr
lidarr.main.unkin.net be_lidarr
@@ -31,8 +29,6 @@ data:
auth.unkin.net be_k8s_kanidm
fe_https.map: |
au-syd1-pve.main.unkin.net be_ausyd1pve_web
au-syd1-pve-api.main.unkin.net be_ausyd1pve_api
sonarr.main.unkin.net be_sonarr
radarr.main.unkin.net be_radarr
lidarr.main.unkin.net be_lidarr
@@ -98,7 +94,6 @@ data:
mode http
description Global HTTPS Frontend
acl acl-letsencrypt path_beg /.well-known/acme-challenge/
acl acl_ausyd1pve req.hdr(host) -i au-syd1-pve.main.unkin.net
acl acl_sonarr req.hdr(host) -i sonarr.main.unkin.net
acl acl_radarr req.hdr(host) -i radarr.main.unkin.net
acl acl_lidarr req.hdr(host) -i lidarr.main.unkin.net
@@ -114,11 +109,8 @@ data:
acl acl_stalwart_webadmin req.hdr(host) -i autoconfig.main.unkin.net
acl acl_stalwart_webadmin req.hdr(host) -i autodiscovery.main.unkin.net
acl acl_kanidm req.hdr(host) -i auth.unkin.net
acl acl_internalsubnets src 198.18.0.0/16 10.10.12.0/24
http-request set-header X-Forwarded-Proto https
http-request set-header X-Real-IP %[src]
http-request deny if { hdr_dom(host) -i au-syd1-pve.main.unkin.net } !acl_internalsubnets
http-response set-header X-Frame-Options DENY if acl_ausyd1pve
http-response set-header X-Frame-Options DENY if acl_sonarr
http-response set-header X-Frame-Options DENY if acl_radarr
http-response set-header X-Frame-Options DENY if acl_lidarr
@@ -185,31 +177,6 @@ data:
tcp-request inspect-delay 5s
tcp-request content accept if { req_len 0 }
backend be_ausyd1pve_api
description Backend for au-syd1 pve cluster (API only)
balance roundrobin
http-request set-header X-Forwarded-Port %[dst_port]
http-request add-header X-Forwarded-Proto https if { dst_port 443 }
http-reuse always
option httpchk GET /
option forwardfor
option http-keep-alive
option prefer-last-server
redirect scheme https if !{ ssl_fc }
backend be_ausyd1pve_web
description Backend for au-syd1 pve cluster (Web)
balance roundrobin
cookie SRVNAME insert indirect nocache
http-request set-header X-Forwarded-Port %[dst_port]
http-request add-header X-Forwarded-Proto https if { dst_port 443 }
http-reuse always
option httpchk GET /
option forwardfor
option http-keep-alive
option prefer-last-server
redirect scheme https if !{ ssl_fc }
backend be_ceph_dashboard
description Backend for Ceph Dashboard from Mgr instances
balance roundrobin