Skip to content

Add HaProxy conf with/without TLS termination #3542

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add HaProxy conf with/without TLS termination #3542

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 26 additions & 0 deletions docs/haproxy/haproxy-with-tls-termination.cfg
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
backend be_matrix
mode http
# Dendrite running on same host:
server static 127.0.0.1:8008 check
# For Dendrite running on host with ip a.b.c.d, replace with:
# server static a.b.c.d:8008 check

backend matrix-well-known-client
http-after-response set-header Access-Control-Allow-Origin "*"
http-after-response set-header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
http-after-response set-header Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept, Authorization"
url":"https://identity.example.com"}}'
http-request return status 200 content-type application/json string '{"m.homeserver":{"base_url":"https://matrix.example.com"},"m.identity_server":{"base_u
rl":"https://matrix.example.com"}}'

backend matrix-well-known-server
http-after-response set-header Access-Control-Allow-Origin "*"
http-after-response set-header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
http-after-response set-header Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept, Authorization"
http-request return status 200 content-type application/json string '{"m.server":"matrix.example.com"}'

frontend fe_matrix_dendrite
# Replace 123.123.123.123 with your PUBLIC ip address
bind 123.123.123.123:8448 ssl crt /etc/haproxy/certs/matrix.example.com.pem
use_backend be_matrix
default_backend be_matrix
26 changes: 26 additions & 0 deletions docs/haproxy/haproxy.cfg
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
backend be_matrix
mode http
# Dendrite running on same host:
server static 127.0.0.1:8448 check
# For Dendrite running on host with ip a.b.c.d, replace with:
# server static a.b.c.d:8448 check

backend matrix-well-known-client
http-after-response set-header Access-Control-Allow-Origin "*"
http-after-response set-header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
http-after-response set-header Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept, Authorization"
url":"https://identity.example.com"}}'
http-request return status 200 content-type application/json string '{"m.homeserver":{"base_url":"https://matrix.example.com"},"m.identity_server":{"base_u
rl":"https://matrix.example.com"}}'

backend matrix-well-known-server
http-after-response set-header Access-Control-Allow-Origin "*"
http-after-response set-header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
http-after-response set-header Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept, Authorization"
http-request return status 200 content-type application/json string '{"m.server":"matrix.example.com"}'

frontend fe_matrix_dendrite
# Replace 123.123.123.123 with your PUBLIC ip address
bind 123.123.123.123:8448
use_backend be_matrix
default_backend be_matrix