From 4430246b2a8d563cf69d2df69cd662b1311e540f Mon Sep 17 00:00:00 2001
From: jurgenhaas <juergen@paragon-es.de>
Date: Thu, 24 May 2018 16:48:05 +0200
Subject: [PATCH] Redirect crm.list domains to SSL
---
templates/haproxy_cfg.jinja2 | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/templates/haproxy_cfg.jinja2 b/templates/haproxy_cfg.jinja2
index c9f576c..6634537 100644
--- a/templates/haproxy_cfg.jinja2
+++ b/templates/haproxy_cfg.jinja2
@@ -180,7 +180,7 @@ frontend http_in
{% endfor %}
{% if hostvars[host].proxy_crm_domains is defined %}
acl crm_domain_in_{{host}} hdr_dom(host) -i -n -f /etc/haproxy/{{host}}.crm.list
- use_backend backend_{{host}} if crm_domain_in_{{host}}
+ use_backend backend_redirect_ssl if crm_domain_in_{{host}}
{% endif %}
{% endfor %}
{% endif %}
@@ -309,6 +309,8 @@ frontend https_in_{{ cert.ip }}
use_backend backend_{{host}}_https if proxy_special_rules_{{host}}_{{rule}}
{% endfor %}
{% if hostvars[host].proxy_crm_domains is defined %}
+ acl crm_domain_in_{{host}} hdr_dom(host) -i -n -f /etc/haproxy/{{host}}.crm.list
+ use_backend backend_{{host}}_https if crm_domain_in_{{host}}
{% endif %}
{% endfor %}
{% endif %}
--
GitLab