starred/rustyip
1
0
Fork 0
mirror of https://github.com/NetworkCats/rustyip.git synced 2026-11-13 16:17:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: correct HAProxy 3.3.4 config syntax in prod template

Browse Source
This commit is contained in:
NetworkCats
2026-03-07 22:49:36 +08:00
parent b4a9750dbd
commit e7fe02a3ea
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/ansible/roles/app/templates/haproxy.cfg.j2
+2 -3
View File
@@ -16,7 +16,7 @@ defaults
log global
mode http
option httplog
option dontlognormal
option dontlog-normal
option http-keep-alive
maxconn 10000
timeout connect 5s
@@ -36,8 +36,7 @@ frontend https_in
# Access to port 443 is already restricted to Cloudflare IPs at the firewall level
# All requests reaching HAProxy come from Cloudflare; no additional ACL validation is required.
# HAProxy's own forwardfor must be disabled, otherwise it will insert Cloudflare node IPs
no option forwardfor
# HAProxy's own forwardfor is not enabled; real IP is set explicitly below via CF-Connecting-IP
# Overwrite standard headers directly with the real IP forcibly added by Cloudflare
http-request set-header X-Forwarded-For %[req.hdr(CF-Connecting-IP)]