Skip to content

Commit 904521f

Browse files
crosmullercrosmuller
committed
put haproxy config here and not in base container
1 parent eba452a commit 904521f

File tree

3 files changed

+170
-0
lines changed

3 files changed

+170
-0
lines changed

‎core/docker-compose.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,13 @@ services:
55
ports:
66
- 80:80
77
- 443:443
8+
# bind mount separate files because the haproxy config
9+
# directory also contains some static error files we do not want
10+
# in our repository
811
volumes:
912
- ./haproxy/haproxy.pem:/usr/local/etc/haproxy/haproxy.pem
13+
- ./haproxy/backends.map:/usr/local/etc/haproxy/backends.map:ro
14+
- ./haproxy/haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro
1015
networks:
1116
coreconextdev:
1217
aliases:

‎core/haproxy/backends.map‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
azuremfa.dev.openconext.local azuremfa_be
2+
gateway.dev.openconext.local gateway_be
3+
middleware.dev.openconext.local middleware_be
4+
ra.dev.openconext.local ra_be
5+
selfservice.dev.openconext.local selfservice_be
6+
tiqr.dev.openconext.local tiqr_be
7+
webauthn.dev.openconext.local webauthn_be
8+
ssp.dev.openconext.local ssp_be
9+
demogssp.dev.openconext.local demogssp_be
10+
stepupapi.dev.openconext.local stepupapi_be
11+
engine.dev.openconext.local engine_be
12+
engine-api.dev.openconext.local engine_be
13+
profile.dev.openconext.local profile_be
14+
mujina-idp.dev.openconext.local mujina-idp_be
15+
mujina-sp.dev.openconext.local mujina-sp_be
16+
manage.dev.openconext.local manage_be
17+
connect.dev.openconext.local connect_be
18+
teams.dev.openconext.local teams_be
19+
voot.dev.openconext.local voot_be
20+
pdp.dev.openconext.local pdp_be
21+
aa.dev.openconext.local aa_be
22+
oidc-playground.dev.openconext.local oidcplayground_be
23+
userlifecycle.dev.openconext.local userlifecycle_be
24+
spdashboard.dev.openconext.local spdashboard_be
25+
invite.dev.openconext.local invite_be
26+
welcome.dev.openconext.local welcome_be
27+
sbs.dev.openconext.local sbs_be

‎core/haproxy/haproxy.cfg‎

Lines changed: 138 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,138 @@
1+
global
2+
log stdout format raw local0 info
3+
pidfile /tmp/haproxy.pid
4+
log 127.0.0.1 len 32768 local2
5+
log-send-hostname
6+
maxconn 4000
7+
user haproxy
8+
group haproxy
9+
ulimit-n 9000
10+
ssl-default-bind-options no-sslv3 no-tls-tickets
11+
ssl-default-bind-ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+AESGCM:DH+AES256:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
12+
ssl-default-server-options no-sslv3 no-tls-tickets
13+
ssl-default-server-ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+AESGCM:DH+AES256:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
14+
stats socket 127.0.0.1:14567
15+
stats socket /var/lib/haproxy/haproxy.stats mode 660 level admin user haproxy group haproxy expose-fd listeners
16+
server-state-file /var/lib/haproxy/state
17+
18+
defaults
19+
mode http
20+
log global
21+
option http-ignore-probes
22+
option http-server-close
23+
option httplog
24+
option redispatch
25+
retries 3
26+
timeout http-request 10s
27+
timeout queue 1m
28+
timeout connect 10s
29+
timeout client 1m
30+
timeout server 1m
31+
timeout http-keep-alive 10s
32+
timeout check 10s
33+
maxconn 3000
34+
load-server-state-from-file global
35+
36+
resolvers docker
37+
nameserver dns1 127.0.0.11:53
38+
resolve_retries 3
39+
timeout resolve 1s
40+
timeout retry 1s
41+
hold other 10s
42+
hold refused 10s
43+
hold nx 10s
44+
hold timeout 10s
45+
hold valid 10s
46+
hold obsolete 10s
47+
48+
frontend fe_web
49+
bind *:443 ssl crt /usr/local/etc/haproxy/haproxy.pem no-sslv3 no-tlsv10 no-tlsv11 alpn h2,http/1.1 transparent
50+
bind *:80
51+
http-request set-header X-Forwarded-Proto https
52+
use_backend stat if { path -i /haproxy }
53+
use_backend %[req.hdr(host),lower,map(/usr/local/etc/haproxy/backends.map)]
54+
55+
backend azuremfa_be
56+
server docker azuremfa:80 check resolvers docker init-addr libc,none
57+
58+
backend gateway_be
59+
server docker gateway:80 check resolvers docker init-addr libc,none
60+
61+
backend middleware_be
62+
server docker middleware:80 check resolvers docker init-addr libc,none
63+
64+
backend ra_be
65+
server docker ra:80 check resolvers docker init-addr libc,none
66+
67+
backend selfservice_be
68+
server docker selfservice:80 check resolvers docker init-addr libc,none
69+
70+
backend tiqr_be
71+
server docker tiqr:80 check resolvers docker init-addr libc,none
72+
73+
backend webauthn_be
74+
server docker webauthn:80 check resolvers docker init-addr libc,none
75+
76+
backend ssp_be
77+
server docker ssp:80 check resolvers docker init-addr libc,none
78+
79+
backend demogssp_be
80+
server docker demogssp:80 check resolvers docker init-addr libc,none
81+
82+
backend stepupapi_be
83+
server docker stepupapi:80 check resolvers docker init-addr libc,none
84+
85+
backend engine_be
86+
server docker engine:80 check resolvers docker init-addr libc,none
87+
88+
backend profile_be
89+
server docker profile:80 check resolvers docker init-addr libc,none
90+
91+
backend mujina-idp_be
92+
server docker mujina-idp:80 check resolvers docker init-addr libc,none
93+
option forwarded
94+
95+
backend mujina-sp_be
96+
server docker mujina-sp:80 check resolvers docker init-addr libc,none
97+
98+
backend manage_be
99+
server docker managegui:80 check resolvers docker init-addr libc,none
100+
101+
backend connect_be
102+
server docker oidcng:80 check resolvers docker init-addr libc,none
103+
104+
backend pdp_be
105+
server docker pdpgui:80 check resolvers docker init-addr libc,none
106+
107+
backend teams_be
108+
server docker teamsgui:80 check resolvers docker init-addr libc,none
109+
110+
backend voot_be
111+
server docker voot:8080 check resolvers docker init-addr libc,none
112+
113+
backend aa_be
114+
server docker aa:8080 check resolvers docker init-addr libc,none
115+
116+
backend oidcplayground_be
117+
server docker oidcplaygroundgui:80 check resolvers docker init-addr libc,none
118+
119+
backend userlifecycle_be
120+
server docker userlifecycle:80 check resolvers docker init-addr libc,none
121+
122+
backend spdashboard_be
123+
server docker spdashboard:80 check resolvers docker init-addr libc,none
124+
125+
backend invite_be
126+
server docker inviteclient:80 check resolvers docker init-addr libc,none
127+
128+
backend welcome_be
129+
server docker invitewelcome:80 check resolvers docker init-addr libc,none
130+
131+
backend sbs_be
132+
server docker sbs:8080 check resolvers docker init-addr libc,none
133+
134+
backend stat
135+
stats enable
136+
stats uri /haproxy
137+
stats refresh 15s
138+
stats show-legends

0 commit comments

Comments
 (0)