paulbsd-salt/states/haproxy/defaults.yaml

63 lines
1.3 KiB
YAML
Raw Normal View History

2022-10-01 20:06:19 +02:00
---
haproxy:
enabled: true
packages:
- haproxy
2022-10-10 10:16:32 +02:00
scripts:
2022-10-23 16:37:53 +02:00
- name: scripts/http.lua
lib: true
- name: scripts/json.lua
lib: true
- name: scripts/collector.lua
lib: false
- name: scripts/weight_by_latency.lua
lib: false
maps:
- access
2022-10-01 20:06:19 +02:00
config:
2022-10-23 16:37:53 +02:00
servername: "PaulBSD WebServer 1.0"
http2: true
2022-10-01 20:06:19 +02:00
defaults:
2022-10-23 16:37:53 +02:00
#log: global
#log: 127.0.0.1 local0
log: stdout format raw daemon info
retries: 2
timeout client: 30m
timeout connect: 4s
timeout server: 30m
timeout check: 5s
2022-10-01 20:06:19 +02:00
dir: /etc/haproxy
configfile: haproxy.cfg
user: haproxy
group: haproxy
http_port: 80
https_port: 443
admin: false
2022-10-23 16:37:53 +02:00
api:
enable: true
filesocket: /var/run/hap-lb.sock
tcpsocket: ipv4@127.0.0.1:9990
2022-10-01 20:06:19 +02:00
acme_dir: /etc/acme
2022-10-23 16:37:53 +02:00
acme_fullchains_dir: /etc/acme/fullchains
acme_dh_dir: /etc/acme/dh
2022-10-01 20:06:19 +02:00
ssl_ciphers:
- "ECDH+AESGCM"
- "DH+AESGCM"
- "ECDH+AES256"
- "DH+AES256"
- "ECDH+AES128"
- "DH+AES"
- "ECDH+3DES"
- "DH+3DES"
- "RSA+AESGCM"
- "RSA+AES"
- "RSA+3DES"
- "!aNULL"
- "!MD5"
- "!DSS"
ssl_options:
- no-sslv3
- no-tls-tickets
vhosts: {}
services: {}