diff --git a/tasks/configure.yml b/tasks/configure.yml index dd4d7928baf124d88b226eef0c4a4544998ba944..03cb7f3b92ffeb7e4cdcb3ff951c703dd084fbd3 100644 --- a/tasks/configure.yml +++ b/tasks/configure.yml @@ -2,7 +2,7 @@ # file: roles/haproxy/tasks/configure.yml - name: "Proxy | Install SSL certificates" - copy: src={{inventory_dir}}/files/ssl/{{item}} + copy: src={{inventory_dir}}/files/ssl/{{item.file}} dest=/etc/haproxy/certs with_items: '{{ proxy_certificates }}' notify: 'Proxy | Restart HAProxy' diff --git a/templates/haproxy_cfg b/templates/haproxy_cfg index 8a8e1ab8931a09d7a75d55e108f9501f0c25d5cb..ddb079937e3f89f74198a09834777d5d8eae7da0 100644 --- a/templates/haproxy_cfg +++ b/templates/haproxy_cfg @@ -64,7 +64,7 @@ frontend http-in {% for cert in proxy_certificates %} frontend https-in - bind :443 ssl crt /etc/haproxy/certs/{{ cert }} no-sslv3 + bind {{ cert.ip }}:443 ssl crt /etc/haproxy/certs/{{ cert.file }} no-sslv3 acl blockedip src -i -f /etc/haproxy/blacklist http-request deny if blockedip {% for host in groups['all'] %}