upgrade haproxy

build-haproxy.sh

@@ -3,8 +3,8 @@
 set -e
 
 
-HAPROXY_VERSION=2.8.4
-HAPROXY_URL=https://www.haproxy.org/download/2.8/src/haproxy-${HAPROXY_VERSION}.tar.gz
+HAPROXY_VERSION=2.9.0
+HAPROXY_URL=https://www.haproxy.org/download/2.9/src/haproxy-${HAPROXY_VERSION}.tar.gz
 HAPROXY_SHA256_URL=${HAPROXY_URL}.sha256
 HAPROXY_SRC=/tmp/haproxy
 

hosts.yaml

@@ -46,7 +46,7 @@ all:
       tt-rss.0rpheus.net: ttrss
       mail.0rpheus.net: roundcube
       blog.0rpheus.net: apache
-      git.0rpheus.net: gogs
+      git.0rpheus.net: gitea
 
     # haproxy backends
     haproxy_backends:
@@ -82,6 +82,6 @@ all:
         server_defs:
           - "mail-docker 127.0.0.1:2080 check"
 
-      gogs:
+      gitea:
         server_defs:
-          - "gogs-web-1 127.0.0.1:3000 check"
+          - "gitea 127.0.0.1:3000 check"

roles/haproxy/templates/haproxy.cfg

@@ -54,8 +54,10 @@ defaults
 
 
 frontend http
-    bind *:80,[::]:80  name http
-    bind *:443,[::]:443 name https ssl crt /etc/haproxy/certs/mail.0rpheus.net.pem crt /etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1
+    bind *:80     name http_v4
+    bind [::]:80  name http_v6
+    bind *:443    name https_v4 ssl crt /etc/haproxy/certs/mail.0rpheus.net.pem crt /etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1
+    bind [::]:443 name https_v6 ssl crt /etc/haproxy/certs/mail.0rpheus.net.pem crt /etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1
 
     compression algo gzip
     compression type text/html text/plain text/javascript application/javascript application/xml text/css