private/haproxy
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Block MS from the public entry
Build docker image and push to registry.bitdeals.org / main-build-job (push) Successful in 33s
Details

Browse Source
This commit is contained in:
private-user
2026-07-02 12:32:39 +03:00
parent 7c8208fc61
commit f9dca2deff
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/haproxy.cfg
+2 -6
View File
@@ -27,9 +27,7 @@ frontend http
use_backend certbot if certbot use_backend certbot if certbot
# # Fool-proof: MS has no auth — never expose /ms publicly. # # Fool-proof: MS has no auth — never expose /ms publicly.
# acl is_ms path -i /ms # http-request deny deny_status 404 if { path -i /ms } || { path -i -m beg /ms/ }
# acl is_ms path_beg -i /ms/
# http-request deny deny_status 404 if is_ms
frontend https frontend https
bind *:443 ssl crt /usr/local/etc/haproxy/certificates/site.pem bind *:443 ssl crt /usr/local/etc/haproxy/certificates/site.pem
@@ -40,9 +38,7 @@ frontend https
use_backend certbot if certbot use_backend certbot if certbot
# # Fool-proof: MS has no auth — never expose /ms publicly. # # Fool-proof: MS has no auth — never expose /ms publicly.
# acl is_ms path -i /ms # http-request deny deny_status 404 if { path -i /ms } || { path -i -m beg /ms/ }
# acl is_ms path_beg -i /ms/
# http-request deny deny_status 404 if is_ms
backend default-backend-http backend default-backend-http
http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto https if { ssl_fc }