This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| deb13:haconfig [2026/09/20 23:52] – [HAProxy] Bernard Condrau | deb13:haconfig [2026/10/29 17:30] (current) – Bernard Condrau | ||
|---|---|---|---|
| Line 43: | Line 43: | ||
| log-format " | log-format " | ||
| timeout connect 5s | timeout connect 5s | ||
| - | timeout client | + | timeout client |
| - | timeout server | + | timeout server |
| # 1. Public Interface (SNI Router) | # 1. Public Interface (SNI Router) | ||
| Line 76: | Line 76: | ||
| # Remove once all hosts are terminated here | # Remove once all hosts are terminated here | ||
| acl terminate_ssl req.ssl_sni -i bak.condrau.com | acl terminate_ssl req.ssl_sni -i bak.condrau.com | ||
| + | acl terminate_mail req.ssl_sni -i mail.condrau.com | ||
| # Route conditionally based on SNI | # Route conditionally based on SNI | ||
| use_backend http_dispatcher if terminate_ssl | use_backend http_dispatcher if terminate_ssl | ||
| + | use_backend webmail_server if terminate_mail | ||
| default_backend passthrough_server | default_backend passthrough_server | ||
| Line 117: | Line 119: | ||
| # downstream server handling its own TLS certificates (Calypso) | # downstream server handling its own TLS certificates (Calypso) | ||
| - | server calypso 192.168.3.90: | + | server calypso 192.168.3.90: |
| + | |||
| + | backend webmail_server | ||
| + | mode tcp | ||
| + | |||
| + | # downstream (synology mail) server handling its own TLS certificates (Merkur) | ||
| + | server merkur 192.168.3.90: | ||
| # 3. Intermediary loopback backend | # 3. Intermediary loopback backend | ||