Ansible/haproxy
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Fix template issue

Browse source
This commit is contained in:
Dryusdan 2024-04-24 10:32:30 +02:00
parent fa3168e18f
commit 8271967562
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
templates/etc/haproxy/haproxy.cfg.j2
View file

@ -12,11 +12,11 @@ global
ca-base /etc/ssl/certs
crt-base /etc/ssl/private
{% if hap_enable_ssl == "true" -%}
{% if hap_enable_ssl is defined and hap_enable_ssl == True -%}
ssl-dh-param-file /etc/haproxy/certs/private/dhparam.pem
{# See: https://ssl-config.mozilla.org/#server=haproxy&server-version=2.0.3&config=intermediate for default config #}
{# See: https://ssl-config.mozilla.org/#server=haproxy&server-version=2.0.3&config=intermediate for default config -#}
{% if hap_config_ssl_default_bind_options is defined and "no-tlsv12" in hap_config_ssl_default_bind_options -%}
{% else -%}
ssl-default-bind-ciphers {{ hap_config_ssl_default_bind_ciphers | default('ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384') }}
@ -32,6 +32,7 @@ global
ssl-default-server-options {{ hap_config_ssl_default_server_options | default('ssl-min-ver TLSv1.2 no-tls-tickets') }}
{% endif %}
defaults
log global
mode http