slfhst/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: remove unneeded webservers load-balancing + treat backend as static IPv4 addresses instead of dynamic IPv6 addresses

Browse Source
This commit is contained in:
VC
2024-07-05 11:53:35 +02:00
parent 3004469c0f
commit 788dfae081
3 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
roles/haproxy/templates/haproxy.cfg.j2
View File

@@ -41,7 +41,7 @@ frontend http
tcp-request inspect-delay 3s
acl letsencrypt path_beg /.well-known/acme-challenge
redirect scheme https code 301 if !letsencrypt
{% for server in groups['webservers'] %}
{% for server in groups['webservers'] | difference(groups['disabled_loadbalanced_webservers']) %}
{% for hostname in hostvars[server]['web_hostname'] %}
## {{ hostname }} configuration
acl host_{{ hostname }} hdr(host) -i {{ hostname }}
@@ -56,7 +56,7 @@ frontend https
bind *:443 name frontend-https
tcp-request inspect-delay 3s
tcp-request content accept if { req.ssl_hello_type 1 }
{% for server in groups['webservers'] %}
{% for server in groups['webservers'] | difference(groups['disabled_loadbalanced_webservers']) %}
{% for hostname in hostvars[server]['web_hostname'] %}
## {{ hostname }} configuration
acl host_{{ hostname }} req.ssl_sni -i {{ hostname }}
@@ -65,15 +65,15 @@ frontend https
{% endfor %}
{% endfor %}
{% for server in groups['webservers'] %}
{% for server in groups['webservers'] | difference(groups['disabled_loadbalanced_webservers']) %}
## {{ server }} configuration
backend http_{{ server }}
mode http
server host_{{ server.split('.')|join('_') }} {{ server }}:80
server host_{{ server.split('.')|join('_') }} {{ hostvars[server]['ansible_default_ipv4']['address'] }}:80
backend https_{{ server }}
mode tcp
server host_{{ server.split('.')|join('_') }} {{ server }}:443
server host_{{ server.split('.')|join('_') }} {{ hostvars[server]['ansible_default_ipv4']['address'] }}:443
{% endfor %}