1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
#!/bin/sh
set -eux
WDIR=$(dirname "$0")
. "${WDIR}/utils"
CERT_DIR=/etc/ssl/localhost
create_ca
create_selfsigned_cert ${CERT_DIR}
cat > /etc/haproxy/haproxy.cfg <<EOF
global
chroot /var/lib/haproxy
user haproxy
group haproxy
daemon
maxconn 4096
ssl-default-bind-options ssl-min-ver SSLv3
defaults
log global
option dontlognull
option redispatch
retries 3
timeout client 50s
timeout connect 10s
timeout http-request 5s
timeout server 50s
maxconn 4096
frontend test-front
bind *:443 ssl crt ${CERT_DIR}/localhost.pem
default_backend test-back
backend test-back
mode http
stick store-request src
stick-table type ip size 256k expire 30m
server test-1 localhost:80 check
EOF
systemctl restart haproxy
sleep 2 # Apache 2 could be still starting... See #976997.
check_index_file "https://localhost"
exit 0
|
