Skip to content

Commit 7a5e5f3

Browse files
crosmullercrosmuller
committed
add haproxy files here not in base image
1 parent b0a428f commit 7a5e5f3

File tree

5 files changed

+227
-1
lines changed

5 files changed

+227
-1
lines changed

‎core/docker-compose.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,14 @@ services:
2424
- invite.dev.openconext.local
2525
- sbs.dev.openconext.local
2626
hostname: haproxy.docker
27+
# bind mount separate files because the haproxy config
28+
# directory also contains some static error files we do not want
29+
# in our repository
30+
volumes:
31+
- ./haproxy/backends.map:/usr/local/etc/haproxy/backends.map:ro
32+
- ./haproxy/haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro
33+
- ./haproxy/haproxy.crt:/usr/local/etc/haproxy/haproxy.crt:ro
34+
- ./haproxy/haproxy.pem:/usr/local/etc/haproxy/haproxy.pem:ro
2735

2836
mariadb:
2937
image: mariadb:10.6

‎core/haproxy/backends.map‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
azuremfa.dev.openconext.local azuremfa_be
2+
gateway.dev.openconext.local gateway_be
3+
middleware.dev.openconext.local middleware_be
4+
ra.dev.openconext.local ra_be
5+
selfservice.dev.openconext.local selfservice_be
6+
tiqr.dev.openconext.local tiqr_be
7+
webauthn.dev.openconext.local webauthn_be
8+
ssp.dev.openconext.local ssp_be
9+
demogssp.dev.openconext.local demogssp_be
10+
stepupapi.dev.openconext.local stepupapi_be
11+
engine.dev.openconext.local engine_be
12+
engine-api.dev.openconext.local engine_be
13+
profile.dev.openconext.local profile_be
14+
mujina-idp.dev.openconext.local mujina-idp_be
15+
mujina-sp.dev.openconext.local mujina-sp_be
16+
manage.dev.openconext.local manage_be
17+
connect.dev.openconext.local connect_be
18+
teams.dev.openconext.local teams_be
19+
voot.dev.openconext.local voot_be
20+
pdp.dev.openconext.local pdp_be
21+
aa.dev.openconext.local aa_be
22+
oidc-playground.dev.openconext.local oidcplayground_be
23+
userlifecycle.dev.openconext.local userlifecycle_be
24+
spdashboard.dev.openconext.local spdashboard_be
25+
invite.dev.openconext.local invite_be
26+
welcome.dev.openconext.local welcome_be
27+
sbs.dev.openconext.local sbs_be
28+

‎core/haproxy/haproxy.cfg‎

Lines changed: 138 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,138 @@
1+
global
2+
log stdout format raw local0 info
3+
pidfile /tmp/haproxy.pid
4+
log 127.0.0.1 len 32768 local2
5+
log-send-hostname
6+
maxconn 4000
7+
user haproxy
8+
group haproxy
9+
ulimit-n 9000
10+
ssl-default-bind-options no-sslv3 no-tls-tickets
11+
ssl-default-bind-ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+AESGCM:DH+AES256:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
12+
ssl-default-server-options no-sslv3 no-tls-tickets
13+
ssl-default-server-ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+AESGCM:DH+AES256:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
14+
stats socket 127.0.0.1:14567
15+
stats socket /var/lib/haproxy/haproxy.stats mode 660 level admin user haproxy group haproxy expose-fd listeners
16+
server-state-file /var/lib/haproxy/state
17+
18+
defaults
19+
mode http
20+
log global
21+
option http-ignore-probes
22+
option http-server-close
23+
option httplog
24+
option redispatch
25+
retries 3
26+
timeout http-request 10s
27+
timeout queue 1m
28+
timeout connect 10s
29+
timeout client 1m
30+
timeout server 1m
31+
timeout http-keep-alive 10s
32+
timeout check 10s
33+
maxconn 3000
34+
load-server-state-from-file global
35+
36+
resolvers docker
37+
nameserver dns1 127.0.0.11:53
38+
resolve_retries 3
39+
timeout resolve 1s
40+
timeout retry 1s
41+
hold other 10s
42+
hold refused 10s
43+
hold nx 10s
44+
hold timeout 10s
45+
hold valid 10s
46+
hold obsolete 10s
47+
48+
frontend fe_web
49+
bind *:443 ssl crt /usr/local/etc/haproxy/haproxy.pem no-sslv3 no-tlsv10 no-tlsv11 alpn h2,http/1.1 transparent
50+
bind *:80
51+
http-request set-header X-Forwarded-Proto https
52+
use_backend stat if { path -i /haproxy }
53+
use_backend %[req.hdr(host),lower,map(/usr/local/etc/haproxy/backends.map)]
54+
55+
backend azuremfa_be
56+
server docker azuremfa:80 check resolvers docker init-addr libc,none
57+
58+
backend gateway_be
59+
server docker gateway:80 check resolvers docker init-addr libc,none
60+
61+
backend middleware_be
62+
server docker middleware:80 check resolvers docker init-addr libc,none
63+
64+
backend ra_be
65+
server docker ra:80 check resolvers docker init-addr libc,none
66+
67+
backend selfservice_be
68+
server docker selfservice:80 check resolvers docker init-addr libc,none
69+
70+
backend tiqr_be
71+
server docker tiqr:80 check resolvers docker init-addr libc,none
72+
73+
backend webauthn_be
74+
server docker webauthn:80 check resolvers docker init-addr libc,none
75+
76+
backend ssp_be
77+
server docker ssp:80 check resolvers docker init-addr libc,none
78+
79+
backend demogssp_be
80+
server docker demogssp:80 check resolvers docker init-addr libc,none
81+
82+
backend stepupapi_be
83+
server docker stepupapi:80 check resolvers docker init-addr libc,none
84+
85+
backend engine_be
86+
server docker engine:80 check resolvers docker init-addr libc,none
87+
88+
backend profile_be
89+
server docker profile:80 check resolvers docker init-addr libc,none
90+
91+
backend mujina-idp_be
92+
server docker mujina-idp:80 check resolvers docker init-addr libc,none
93+
option forwarded
94+
95+
backend mujina-sp_be
96+
server docker mujina-sp:80 check resolvers docker init-addr libc,none
97+
98+
backend manage_be
99+
server docker managegui:80 check resolvers docker init-addr libc,none
100+
101+
backend connect_be
102+
server docker oidcng:80 check resolvers docker init-addr libc,none
103+
104+
backend pdp_be
105+
server docker pdpgui:80 check resolvers docker init-addr libc,none
106+
107+
backend teams_be
108+
server docker teamsgui:80 check resolvers docker init-addr libc,none
109+
110+
backend voot_be
111+
server docker voot:8080 check resolvers docker init-addr libc,none
112+
113+
backend aa_be
114+
server docker aa:8080 check resolvers docker init-addr libc,none
115+
116+
backend oidcplayground_be
117+
server docker oidcplaygroundgui:80 check resolvers docker init-addr libc,none
118+
119+
backend userlifecycle_be
120+
server docker userlifecycle:80 check resolvers docker init-addr libc,none
121+
122+
backend spdashboard_be
123+
server docker spdashboard:80 check resolvers docker init-addr libc,none
124+
125+
backend invite_be
126+
server docker inviteclient:80 check resolvers docker init-addr libc,none
127+
128+
backend welcome_be
129+
server docker invitewelcome:80 check resolvers docker init-addr libc,none
130+
131+
backend sbs_be
132+
server docker sbs:8080 check resolvers docker init-addr libc,none
133+
134+
backend stat
135+
stats enable
136+
stats uri /haproxy
137+
stats refresh 15s
138+
stats show-legends

‎core/haproxy/haproxy.crt‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,4 +21,3 @@ lN765qvCcBoMc9bGdkCY+CEWV0mrVx0deFtoValOHSonU8lfGVXuAOPAFQ6IWCd/
2121
xYc2HYhfoShF0HcVjJhJAVysFQ+1oEus3xygGt8ywsJE+2b3c+OSnpqPjZKCopLd
2222
QVPFkX+6L74Uug8cIwB6B0SBlsd79664YNOB
2323
-----END CERTIFICATE-----
24-

‎core/haproxy/haproxy.pem‎

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
-----BEGIN PRIVATE KEY-----
2+
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCTXniv7fbbcelj
3+
HDGoMoCRlpirVdbiLUQDwGbnRa+VjohagE+HcAc42n3bncC8U8s3AfB4ONpEh9Mo
4+
MLD8beR3puEoPxhfQmtRnxHOr80ZhGbY2qqTjDUq0YkBsnq9XTCQd4AWiWXFC1YU
5+
xbJLe4CltWvCCcigbIbnydtE5m3/xnw+CfjE+vzC4gD4XxUwgCtUATZbxPYgldkF
6+
Z2zbGsaM1FU9nTAZVk7u9kGxvDRsjankNOXbQpD04B2KYTzZxGgdEzbQtO/JCUAn
7+
XjSy/yriH2z/vpWZPJMM1cHENdxv+2eIgaurRMcE5R8ZSWhHE7MNGcl1U44vtCsW
8+
fqeS6GQFAgMBAAECggEACEU/BLCYMAyein9kkgnziTgobUUuABeGP6emnsgcaIpN
9+
QLb+v50b6qbodVDPJkKVnwqu0jBun3X39cN1y1Tng4eMD1QrK/1wRG5m83COVCZI
10+
F1d+RzWRLkwAImY/2SzHsvPh7mHboklWlWfa772IpMQfvg4KgmZU0+FSOvWrqrUF
11+
Ks54ETNqki5GydjrYDGLuSwAcC/owNe45Zdx5Uu/6O+DFlowVKWgxf4r6PKQZ6xI
12+
SoFQpV9R/yecEqAzst/CIgjFp37kI9/X1g9NkK11JIrnWRApVD97IXglItA3NWTn
13+
LLunwdY4Qvm/TBx7PBppclRNEX30Sw/doqF25Dn0AQKBgQDCxbdsK7PvTGKHTW41
14+
LgusOlRWpzBRILvsmnKnMMotaYaxDPOqfySrBul7+/sMYi9d2nPiDb9T0xaIm6Lw
15+
0VjmpA4XLA6vyLeokz4fw/1ef+qouXVz3QTC8o/sIOObilcO/Z9qfP+ONduBdhhG
16+
AEo9/7850UC5V2oRZuyKFDY5gQKBgQDBsfqmPFLmpwWaO7xPKGTpQ7wTDy37823H
17+
TCr1gCj60BkouUYUyYbf7j+W290ukRJupUZLTo8df8dogmwA7Qi9ET+cobAos1bD
18+
S8xOSbK95/rdVX5H/Qgbw7yspQlye0ffmQZqAOQMmOLCHos+6YsfznM+FJ6/nWTr
19+
KAv0LBaEhQKBgCkKIhDv0HUeojAiN5OLBTif/b9YcQzXGeHL1Va3KBKThqbttLX7
20+
Hk3PIglW2doNIi/jZMF/5g2Sj8/vA1E8uz+116Y4SUvuvgwOImvtDwkHaPluQnpM
21+
WsF8/KhjcbIHXzqwZBO7DNn5LSxFJu4xB3Oy3KchGUM0UQwjpLmfcqGBAoGBAJ7k
22+
5BturQstxLjLfCTrnCyHNkfkUfK3tTyizTLr2bI2+AyiQE1ZLN2SUnPtFTrYI2jF
23+
CC9K2Lh4VBr1sqfnyx1egvJ46UvaIri++3DVoF2Nagwb0CY5+mbcYXC3SlKxszpI
24+
DCz1Yh67ZHmeGNiZOVn0QDGTNM83zMvj5Dp/2FEJAoGAB3rzW5LcA+LVT6hPcgbo
25+
sn9RGhVrqmiysNYAc7tT0/QI21QSWlQ+KUHq66S07AMm85uzUFLnw+ci1kLyFts8
26+
tcfp4F0hyKQADbRvzqXwWqkPjAr1VqYzJOCVeHlPtrvsaGDltM+eu0tf6ZQOQ8mH
27+
pTmwrSTeyUvvofYpFd/B8ZE=
28+
-----END PRIVATE KEY-----
29+
-
30+
-----BEGIN CERTIFICATE-----
31+
MIID1zCCAr+gAwIBAgIUDvja2rnsTgFy+cvxfHNTWDbMRLwwDQYJKoZIhvcNAQEL
32+
BQAwezELMAkGA1UEBhMCTkwxEDAOBgNVBAgMB1V0cmVjaHQxEDAOBgNVBAcMB1V0
33+
cmVjaHQxEjAQBgNVBAoMCVNVUkYgQi5WLjETMBEGA1UECwwKT3BlbkNvbmV4dDEf
34+
MB0GA1UEAwwWKi5kZXYub3BlbmNvbmV4dC5sb2NhbDAeFw0yMzAzMjgxMTQ0Mjha
35+
Fw0yNTEyMjIxMTQ0MjhaMHsxCzAJBgNVBAYTAk5MMRAwDgYDVQQIDAdVdHJlY2h0
36+
MRAwDgYDVQQHDAdVdHJlY2h0MRIwEAYDVQQKDAlTVVJGIEIuVi4xEzARBgNVBAsM
37+
Ck9wZW5Db25leHQxHzAdBgNVBAMMFiouZGV2Lm9wZW5jb25leHQubG9jYWwwggEi
38+
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXniv7fbbceljHDGoMoCRlpir
39+
VdbiLUQDwGbnRa+VjohagE+HcAc42n3bncC8U8s3AfB4ONpEh9MoMLD8beR3puEo
40+
PxhfQmtRnxHOr80ZhGbY2qqTjDUq0YkBsnq9XTCQd4AWiWXFC1YUxbJLe4CltWvC
41+
CcigbIbnydtE5m3/xnw+CfjE+vzC4gD4XxUwgCtUATZbxPYgldkFZ2zbGsaM1FU9
42+
nTAZVk7u9kGxvDRsjankNOXbQpD04B2KYTzZxGgdEzbQtO/JCUAnXjSy/yriH2z/
43+
vpWZPJMM1cHENdxv+2eIgaurRMcE5R8ZSWhHE7MNGcl1U44vtCsWfqeS6GQFAgMB
44+
AAGjUzBRMB0GA1UdDgQWBBRXEU6j5ncv/nhZIPHFXGNoGPWsHzAfBgNVHSMEGDAW
45+
gBRXEU6j5ncv/nhZIPHFXGNoGPWsHzAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3
46+
DQEBCwUAA4IBAQARl/Hu+C6argh4I9UvCaJGyQaKNH8fe7JWkailaCLZBXXi/Wpi
47+
6vTqZmTUp03Srqkxm2ng/8UjslN7mX1AYgofqv8vUK3wrNkjiW5E6fWNw8jy+s81
48+
8g6UNCvorEp+6TxDciR1BK5dC2yLlhvhfayAtMxdR0mMybEhk9PCMwJSaMmrzRpm
49+
lN765qvCcBoMc9bGdkCY+CEWV0mrVx0deFtoValOHSonU8lfGVXuAOPAFQ6IWCd/
50+
xYc2HYhfoShF0HcVjJhJAVysFQ+1oEus3xygGt8ywsJE+2b3c+OSnpqPjZKCopLd
51+
QVPFkX+6L74Uug8cIwB6B0SBlsd79664YNOB
52+
-----END CERTIFICATE-----
53+

0 commit comments

Comments
 (0)