This commit is contained in:
Michael Rennecke 2023-12-04 21:34:25 +01:00
parent 17deb9c7a3
commit e793387cab
1 changed files with 5 additions and 5 deletions

View File

@ -3,7 +3,7 @@ global
log /dev/log local1 notice
chroot /var/lib/haproxy
stats socket /run/haproxy_admin.sock mode 660 level admin expose-fd listeners
stats timeout 30s
stats timeout 30s
user haproxy
group haproxy
daemon
@ -16,7 +16,7 @@ global
ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
ssl-default-server-ciphers AES128+ECDHE:AES256+ECDHE
ssl-default-server-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
ssl-default-server-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
defaults
@ -37,7 +37,7 @@ defaults
# no option http-use-htx
timeout http-request 20s
timeout http-request 20s
timeout connect 5s
timeout client 50s
timeout server 50s
@ -54,8 +54,8 @@ defaults
frontend http
bind *:80 name http
bind *:443 name https ssl crt /etc/haproxy/certs/mail.0rpheus.net.pem crt /etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1
bind *:80,[::]:80 name http
bind *:443,[::]:443 name https ssl crt /etc/haproxy/certs/mail.0rpheus.net.pem crt /etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1
compression algo gzip
compression type text/html text/plain text/javascript application/javascript application/xml text/css