updated haproxy state

2025-03-05 22:22:01 +01:00 · 2025-03-05 22:22:01 +01:00 · 5e84d70943
commit 5e84d70943
parent b12c5ad021
1 changed files with 1 additions and 0 deletions
--- a/states/haproxy/templates/haproxy.cfg.j2
+++ b/states/haproxy/templates/haproxy.cfg.j2
@ -292,6 +292,7 @@ frontend fe_https from {{ haproxy.config.namespace }}
  http-response set-header Server "{{ haproxy.config.servername }}"
  http-response set-header X-Random "%[var(txn.random)]"
  http-response set-header X-Robots-Tag "noindex,nofollow"
+  http-request set-header X-SSL-JA3 %[ssl_fc_protocol_hello_id],%[ssl_fc_cipherlist_bin(1),be2dec(-,2)],%[ssl_fc_extlist_bin(1),be2dec(-,2)],%[ssl_fc_eclist_bin(1),be2dec(-,2)],%[ssl_fc_ecformats_bin,be2dec(-,1)]
 {% if haproxy.config.quic|default(true) %}
 .if feature(QUIC)
  http-response set-header Alt-Svc "h3=\":443\"; ma=3600"