posts/my-haproxy-config/

[giscus[bot]]

posts/my-haproxy-config/

This is an explanation of my HAProxy config, as a reminder for myself. This has evolved over time. Most recently I have added a redirection for external or internal traffic to backends. The reason for this was due to adding a Jellyfin server and I didn’t want that running over Cloudflare if the connection was coming from the internal network.

https://ciphermenial.github.io/posts/my-haproxy-config/

[webtroter]

Hi, Thank you for the write-up, I was able to figure some stuff out for my HAProxy Setup.

I only have one question : How does your Cloudflare tunnel looks like?

Is it something like this?

ingress:
  - hostname: host.example.net
    service: https://localhost:443
  - hostname: keycloak.example.net
    service: https://localhost:443

Thanks

[webtroter]

Ahh, I think I kinda figured it out : you are not using Cloudflare Tunnels 😅🥲

[yaronhb]

Very intresting post!
However, I'm a little puzzled with the DNS records: how do you prevent a client in the internal network from trying to access the Cloudflare proxy?
Do you have an internal DNS server?

[ciphermenial]

Yeah. I use PowerDNS internally.