diff --git a/roles/haproxy/templates/haproxy.cfg b/roles/haproxy/templates/haproxy.cfg index 5c39191..d91d754 100644 --- a/roles/haproxy/templates/haproxy.cfg +++ b/roles/haproxy/templates/haproxy.cfg @@ -3,7 +3,7 @@ global log /dev/log local1 notice chroot /var/lib/haproxy stats socket /run/haproxy_admin.sock mode 660 level admin expose-fd listeners - stats timeout 30s + stats timeout 30s user haproxy group haproxy daemon @@ -16,7 +16,7 @@ global ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets ssl-default-server-ciphers AES128+ECDHE:AES256+ECDHE - ssl-default-server-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets + ssl-default-server-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets defaults @@ -37,7 +37,7 @@ defaults # no option http-use-htx - timeout http-request 20s + timeout http-request 20s timeout connect 5s timeout client 50s timeout server 50s @@ -54,8 +54,8 @@ defaults frontend http - bind *:80 name http - bind *:443 name https ssl crt /etc/haproxy/certs/mail.0rpheus.net.pem crt /etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1 + bind *:80,[::]:80 name http + bind *:443,[::]:443 name https ssl crt /etc/haproxy/certs/mail.0rpheus.net.pem crt /etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1 compression algo gzip compression type text/html text/plain text/javascript application/javascript application/xml text/css