blob: e15da8a465d5660ae1b37260f4bad9c5301e02e0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
global
chroot /var/lib/haproxy
ca-base ./tmp
crt-base ./tmp
tune.ssl.default-dh-param 4096
defaults
log global
mode http
retries 1
timeout http-request 10s
timeout queue 1s
timeout connect 1s
timeout client 1s
timeout server 1s
timeout http-keep-alive 1s
timeout check 10s
maxconn 32
frontend www-https
bind *:443 ssl crt wildcard.test.pem
acl goproxy-backend ssl_fc_sni goproxy.test
acl nuget-backend ssl_fc_sni nuget.test
acl rubygems-backend ssl_fc_sni rubygems.test
http-request replace-header Host .* api.nuget.org if nuget-backend
http-request replace-header Host .* proxy.golang.org if goproxy-backend
http-request replace-header Host .* rubygems.org if rubygems-backend
use_backend goproxy-backend if goproxy-backend
use_backend nuget-backend if nuget-backend
use_backend rubygems-backend if rubygems-backend
backend goproxy-backend
server www1 proxy.golang.org:443 ssl verify none
backend nuget-backend
server www1 api.nuget.org:443 ssl verify none
backend rubygems-backend
server www1 rubygems.org:443 ssl verify none
|