Verified Commit ddda6632 authored by Elias Ojala's avatar Elias Ojala
Browse files

Updates

parent 6f820944
--- ---
title: Haproxy title: HAProxy
permalink: /haproxy/ permalink: /haproxy/
--- ---
...@@ -12,13 +12,13 @@ global ...@@ -12,13 +12,13 @@ global
log /dev/log local0 log /dev/log local0
log /dev/log local1 notice log /dev/log local1 notice
chroot /var/lib/haproxy chroot /var/lib/haproxy
stats socket /run/haproxy/admin.sock mode 660 level admin stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners
stats timeout 30s stats timeout 30s
user haproxy user haproxy
group haproxy group haproxy
daemon daemon
# https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=haproxy-1.7.5&openssl=1.1.0i&hsts=yes&profile=intermediate # https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=haproxy-1.8.0&openssl=1.1.0i&hsts=yes&profile=modern
# If you are using different version (check with `openssl version` and `haproxy -v`, go get new ciphers&options) # If you are using different version (check with `openssl version` and `haproxy -v`, go get new ciphers&options)
# set default parameters to the intermediate configuration # set default parameters to the intermediate configuration
ssl-default-bind-ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256 ssl-default-bind-ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment