Verified Commit f5adc323 authored by Elias Ojala's avatar Elias Ojala
Browse files

Haproxy configuration

parent da33c41b
......@@ -68,6 +68,18 @@ Use this utility to convert certs outputted by Certbot to ones compatible by HAP
* [LE-Combiner](https://github.com/theel0ja/haproxy-scripts/blob/master/le-combiner/)
```bash
sudo su -
mkdir /etc/haproxy/certs
chmod 700 /etc/haproxy/certs
git clone https://github.com/theel0ja/haproxy-scripts.git
ln -s ~/haproxy-scripts/le-combiner/le-combiner.sh ~/le-combiner.sh
./le-combiner.sh
```
To generate certificates, see [this guide](certbot.md#http-used-by-haproxy-examples).
### Cronjob (root)
......@@ -88,6 +100,10 @@ To generate certificates, see [this guide](certbot.md#http-used-by-haproxy-examp
```haproxy
frontend https-in
bind *:443 ssl crt /etc/haproxy/certs/ alpn h2,http/1.1
reqadd X-Forwarded-Proto:\ https
http-response set-header Strict-Transport-Security max-age=15768000
...
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment