Benoit/HAProxy
Benoit/HAProxy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add mastodon

Browse source
This commit is contained in:
Benoit 2024-10-11 20:09:51 +09:00
parent 740b1f4ae7
commit 23cb3bfeec
Signed by: Benoit
SSH key fingerprint: SHA256:kFsX94Kq6z/6CY0dX+7/FpAeJC0QlMhJVY+B7NYrOmA
2 changed files with 15 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
03frontends.cfg
View file

@ -289,14 +289,16 @@ frontend frontend_default
http-request redirect prefix https://%[hdr(host),regsub(^www\.,,i)] code 301 if { hdr_beg(host) -i www. } http-request redirect prefix https://%[hdr(host),regsub(^www\.,,i)] code 301 if { hdr_beg(host) -i www. }
acl letsencrypt path_beg /.well-known/acme-challenge/ acl letsencrypt path_beg /.well-known/acme-challenge/
acl laminar hdr(host) -i laminar.benoit.jp.net acl laminar hdr(host) -i laminar.benoit.jp.net
acl forgejo hdr(host) -i forgejo.benoit.jp.net acl forgejo hdr(host) -i forgejo.benoit.jp.net
acl mastodon hdr(host) -i mastodon.benoit.jp.net
#http-request deny if flux !JP !letsencrypt #http-request deny if flux !JP !letsencrypt
#http-request deny if dns !JP !SG !letsencrypt #http-request deny if dns !JP !SG !letsencrypt
use_backend letsencrypt if letsencrypt use_backend letsencrypt if letsencrypt
use_backend laminar if laminar use_backend laminar if laminar
use_backend forgejo if forgejo use_backend forgejo if forgejo
use_backend mastodon if mastodon
default_backend default default_backend default

12
05backends.cfg
View file

@ -23,4 +23,14 @@ backend forgejo
http-response set-header X-Content-Type-Options "nosniff" http-response set-header X-Content-Type-Options "nosniff"
http-response set-header Referrer-Policy "strict-origin-when-cross-origin" http-response set-header Referrer-Policy "strict-origin-when-cross-origin"
http-response set-header Cross-Origin-Resource-Policy "same-origin" http-response set-header Cross-Origin-Resource-Policy "same-origin"
server laminar forgejo.incus:3000 check server forgejo forgejo.incus:3000 check
backend forgejo
# set HSTS for one year after all responses
http-response set-header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
# add some Security headers
http-response set-header X-Frame-Options "SAMEORIGIN"
http-response set-header X-Content-Type-Options "nosniff"
http-response set-header Referrer-Policy "strict-origin-when-cross-origin"
http-response set-header Cross-Origin-Resource-Policy "same-origin"
server mastodon mastodon.incus:80 send-proxy check