haproxy/README.md

Setup HAProxy service

Config example:

    haproxy_ssl: yes
    haproxy_self_sign_cert: yes
    haproxy_config:
      frontend:
        well-known:
          bind: ':80'
          mode: http
          acl:
            - letsencrypt-acl path_beg /.well-known/acme-challenge/
            - has_cors res.hdr(Access-Control-Allow-Origin) -m found
          http-request:
            - redirect scheme https if !{ path_beg /.well-known/acme-challenge/ } !{ ssl_fc }
          use_backend:
            - letsencrypt-backend if letsencrypt-acl
        https:
          bind: ':443 ssl crt {{ haproxy_ssl_path }}'
          mode: http
          acl:
            - letsencrypt-acl path_beg /.well-known/acme-challenge/
          use_backend:
            - letsencrypt-backend if letsencrypt-acl
          default_backend: localhost_5001
      backend:
        letsencrypt-backend:
          mode: http
          server:
            - letsencrypt 127.0.0.1:8080
        localhost_5001:
          mode: http
          server:
            - localhost 127.0.0.1:5001
      listen:
        rabbitmq:
          bind: "10.89.10.112:5672"
          mode: tcp
          option:
            - tcpka
          server:
            - t1-dev-rabbitmq-1 10.89.10.71:5672 check inter 2000 rise 2 fall 5
            - t1-dev-rabbitmq-2 10.89.10.72:5672 check inter 2000 rise 2 fall 5
            - t1-dev-rabbitmq-3 10.89.10.73:5672 check inter 2000 rise 2 fall 5
        rabbitmq_management:
          bind: "10.89.10.112:15672"
          mode: http
          server:
            - t1-dev-rabbitmq-1 10.89.10.71:15672 check inter 2000 rise 2 fall 5
            - t1-dev-rabbitmq-2 10.89.10.72:15672 check inter 2000 rise 2 fall 5
            - t1-dev-rabbitmq-3 10.89.10.73:15672 check inter 2000 rise 2 fall 5
        stats:
          bind: ":9000"
          mode: http
          stats:
            - enable
            - hide-version
            - realm Haproxy\ Statistics
            - uri /haproxy_stats
            - auth {{ haproxy_stats_user }}:{{ haproxy_stats_password }}

Map example:

    haproxy_map:
      hosts.map: |
        #domainname           backendname
        example.com backend
        *.example.com backend

Lua example:

    haproxy_lua:
      invertPath.lua: |
        local function invertPath(host)
          host = host:gsub('website.*','')
          a, b = host:match"(.*)%.([^.]+)"
          -- print(a)
          -- print(b)
          s = b .. ":" .. a
          return s
        end
        
        core.register_converters("invertPath", invertPath)