haproxy/defaults/main.yaml

49 lines
1.1 KiB
YAML

haproxy_version: ""
haproxy_path: /etc/haproxy
haproxy_ssl: no
haproxy_ssl_path: "{{ haproxy_path }}/ssl"
haproxy_cert_name: haproxy.pem
haproxy_self_signed_cert: no
haproxy_self_signed_cert_gen_path: "{{ haproxy_path }}/tempssl"
haproxy_lua_path: "{{ haproxy_path }}/lua"
haproxy_maps_path: "{{ haproxy_path }}/maps"
haproxy_stats_user: haproxy
haproxy_stats_password: P@ssw0rd
haproxy_dataplaneapi: false
haproxy_prometheus_exporter: false
haproxy_prometheus_exporter_port: 8505
haproxy_prometheus_exporter_metrics_path: "/metrics"
haproxy_prometheus_exporter_frontend_name: "prometheus"
haproxy_default_config:
global:
daemon:
chroot: /var/lib/haproxy
maxconn: 200000
user: haproxy
group: haproxy
pidfile: /var/run/haproxy.pid
log:
- "127.0.0.1 local0"
stats:
- "socket /var/lib/haproxy/stats mode 0660 level admin"
'tune.ssl.default-dh-param': 2048
defaults:
log:
- global
maxconn: 200000
retries: 3
option:
- redispatch
timeout:
- http-request 10s
- queue 1m
- connect 10s
- client 10m
- server 10m
- check 10s