Has anyone managed to get this working? I have a basic configuration working, but it appears to have broken WebSudo...
global
log 127.0.0.1 local2
chroot /var/lib/haproxy
pidfile /var/run/haproxy.pid
maxconn 10000
user root
group root
daemon
tune.ssl.default-dh-param 2048
stats socket /var/lib/haproxy/stats
defaults
mode http
log global
option httplog
option dontlognull
option http-server-close
option forwardfor except 127.0.0.0/8
option redispatch
retries 3
timeout http-request 10s
timeout queue 1m
timeout connect 10s
timeout client 1m
timeout server 1m
timeout http-keep-alive 10s
timeout check 10s
maxconn 10000
stats enable
stats uri /proxy-stats
stats realm HAproxy\ Statistics
stats auth user:pass
frontend confluence_web_insecure
bind *:80
redirect scheme https if !{ ssl_fc }
frontend confluence_web_secure
mode http
bind *:443 ssl crt /foo.pem
reqadd X-Forwarded-Proto:\ https
reqadd X-Forwarded-Port:\ 443
default_backend confluence_app
backend confluence_app
option httplog
option forwardfor
option http-server-close
option httpchk
mode http
balance roundrobin
cookie JSESSIONID prefix indirect nocache
server node01 foo1.bar.baz ssl verify none cookie s1
server node02 foo2.bar ssl verify none cookie s2
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.