add_vds_configs

2026-04-04 14:14:26 +03:00
commit ad0ab6fb1e
5 changed files with 309 additions and 0 deletions
@@ -0,0 +1,107 @@
+global
+    log /dev/log local2
+    chroot /var/lib/haproxy
+    maxconn 4000
+    user haproxy
+    group haproxy
+    daemon
+    stats socket /var/lib/haproxy/stats mode 660 level admin
+
+defaults
+    log global
+    mode tcp
+    option tcplog
+    option dontlognull
+    retries 3
+    timeout connect 5s
+    timeout client 1h
+    timeout server 1h
+    timeout check 10s
+
+# http
+frontend http_frontend
+    bind ip:80
+    mode http
+    option httplog
+    
+    acl host_host2 hdr_end(host) -m end host2.tld
+    
+    use_backend host2_http_srv if is_host2
+    default_backend host1_http_srv
+
+backend host1_http_srv
+    mode http
+    server host1_srv 10.x.102.3:81 check send-proxy-v2
+
+backend host2_http_srv
+    mode http
+    server host2_srv 10.x.200.1:81 check send-proxy-v2
+
+# https
+frontend https_frontend
+    bind ip:443
+    mode tcp
+    option tcplog
+    tcp-request inspect-delay 5s
+    tcp-request content accept if { req_ssl_hello_type 1 }
+
+    acl host_host2 req_ssl_sni -m end host2.tld
+    acl host_host3 req_ssl_sni -i host3.tld
+
+    use_backend host2_https_srv if host_host2
+    use_backend host3_https_srv if host_host3
+    default_backend host1_https_srv
+
+backend host1_https_srv
+    mode tcp
+    server host1_srv 10.x.102.3:444 check send-proxy-v2
+
+backend host2_https_srv
+    mode tcp
+    server host2_srv 10.x.200.1:444 check send-proxy-v2
+
+backend host3_https_srv
+    mode tcp
+    server host3_srv x.x.x.x:443 check
+
+# gitea
+listen gitea_ssh_secure
+    bind ip:2211
+    bind 127.0.0.1:2211
+    mode tcp
+    default_backend gitea_ssh_backend
+
+backend gitea_ssh_backend
+    mode tcp
+    server gitea_srv 10.x.103.3:22 check
+
+# mcsmanager-daemon
+listen mcsmanager_service
+    bind ip:24444
+    mode tcp
+    server mcs_srv 10.x.102.3:24445 check send-proxy-v2
+
+# prosody
+listen xmpp_c2s
+    bind ip:5222
+    server prosody_srv 10.x.103.9:5222 check
+
+listen xmpp_legacy_ssl
+    bind ip:5223
+    server prosody_srv 10.x.103.9:5223 check
+
+listen xmpp_s2s
+    bind ip:5269
+    server prosody_srv 10.x.103.9:5269 check
+
+listen prosody_proxy65
+    bind ip:5000
+    server prosody_srv 10.x.103.9:5000 check
+
+listen prosody_components
+    bind ip:5270
+    server prosody_srv 10.x.103.9:5270 check
+
+listen prosody_bosh_http
+    bind ip:5280
+    server prosody_srv 10.x.103.9:5280 check