I double check and no, HAP_BEHIND_PROXY wasn't set. But HAP_BEHIND_PROXY_EXCEPT_HKP is (in /etc/default/haproxy I directly set variable and it loaded by systemd service)

Is now ok :)


Dryusdan

Le 05/04/2024 à 18:40, Andrew Gallagher a écrit :
On 5 Apr 2024, at 17:34, Dryusdan <cont...@dryusdan.fr> wrote:

I change my setup today and add HAProxy and standalone configuration. Actually it is behind nginx for both,keys.dryusdan.net <http://keys.dryusdan.net/>andgpg.4n0ny.me <http://gpg.4n0ny.me/>.

Great stuff! Did you make sure to uncomment HAP_BEHIND_PROXY? If not, you may end up tarpitting your own nginx. (and remember to comment it out again when you remove nginx, otherwise you won’t be protected at all)

A

Attachment: OpenPGP_0xEC1438DDE24E27D7.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to