private/haproxy
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Block MS from the public entry
Build docker image and push to registry.bitdeals.org / main-build-job (push) Successful in 40s
Details

Browse Source
This commit is contained in:
private-user
2026-07-02 12:20:25 +03:00
parent e157a30c6d
commit 7c8208fc61
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/haproxy.cfg
+10
View File
@@ -26,6 +26,11 @@ frontend http
acl certbot path_beg /.well-known/acme-challenge/ acl certbot path_beg /.well-known/acme-challenge/
use_backend certbot if certbot use_backend certbot if certbot
# # Fool-proof: MS has no auth — never expose /ms publicly.
# acl is_ms path -i /ms
# acl is_ms path_beg -i /ms/
# http-request deny deny_status 404 if is_ms
frontend https frontend https
bind *:443 ssl crt /usr/local/etc/haproxy/certificates/site.pem bind *:443 ssl crt /usr/local/etc/haproxy/certificates/site.pem
http-request add-header X-Forwarded-Proto https http-request add-header X-Forwarded-Proto https
@@ -34,6 +39,11 @@ frontend https
acl certbot path_beg /.well-known/acme-challenge/ acl certbot path_beg /.well-known/acme-challenge/
use_backend certbot if certbot use_backend certbot if certbot
# # Fool-proof: MS has no auth — never expose /ms publicly.
# acl is_ms path -i /ms
# acl is_ms path_beg -i /ms/
# http-request deny deny_status 404 if is_ms
backend default-backend-http backend default-backend-http
http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto https if { ssl_fc }
server main nginx:80 check server main nginx:80 check