Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| deb13:haconfig [2026/09/20 21:13] – [Dynamic Whitelist] Bernard Condrau | deb13:haconfig [2026/10/29 17:30] (current) – Bernard Condrau | ||
|---|---|---|---|
| Line 43: | Line 43: | ||
| log-format " | log-format " | ||
| timeout connect 5s | timeout connect 5s | ||
| - | timeout client | + | timeout client |
| - | timeout server | + | timeout server |
| # 1. Public Interface (SNI Router) | # 1. Public Interface (SNI Router) | ||
| Line 76: | Line 76: | ||
| # Remove once all hosts are terminated here | # Remove once all hosts are terminated here | ||
| acl terminate_ssl req.ssl_sni -i bak.condrau.com | acl terminate_ssl req.ssl_sni -i bak.condrau.com | ||
| + | acl terminate_mail req.ssl_sni -i mail.condrau.com | ||
| # Route conditionally based on SNI | # Route conditionally based on SNI | ||
| use_backend http_dispatcher if terminate_ssl | use_backend http_dispatcher if terminate_ssl | ||
| + | use_backend webmail_server if terminate_mail | ||
| default_backend passthrough_server | default_backend passthrough_server | ||
| Line 117: | Line 119: | ||
| # downstream server handling its own TLS certificates (Calypso) | # downstream server handling its own TLS certificates (Calypso) | ||
| - | server calypso 192.168.3.18:443 check | + | server calypso 192.168.3.90:443 check |
| + | |||
| + | backend webmail_server | ||
| + | mode tcp | ||
| + | |||
| + | # downstream (synology mail) server handling its own TLS certificates (Merkur) | ||
| + | server merkur 192.168.3.90: | ||
| # 3. Intermediary loopback backend | # 3. Intermediary loopback backend | ||
| Line 220: | Line 228: | ||
| * Put a shortcut on the Windows Desktop for easy access:< | * Put a shortcut on the Windows Desktop for easy access:< | ||
| * This way you can add your computer to the trusted IP list (whitelist) no matter what is the current IP address. | * This way you can add your computer to the trusted IP list (whitelist) no matter what is the current IP address. | ||
| - | |||
| - | ===== Powershell ===== | ||
| - | * Create the following Powershell script and use it with a shortcut to '' | ||
| - | # This is an example Powershell file for DuckDNS updater, see https:// | ||
| - | param($domain) | ||
| - | $duckdomain = if (!$domain) { " | ||
| - | $addr = curl.exe -s " | ||
| - | curl.exe -k " | ||
| - | </ | ||