Frederic, thanks for reaching out. Unfortunately we don't use HAproxy
internally and I'm not aware of anyone on the team with experience running
it, so I can't really offer any advice here. But I wanted to reply just to
assure you that we're not ignoring you, we just don't have enough
familiarity with that tool to help out :-(
Cheers,
Ryan
On 12 January 2018 at 22:46, Frederic ALIAGA <frede...@lee-aliaga.fr> wrote:
> Hello,
>
> i try for several days to configure HAproxy to make it work with
> firefoxsync 1.5 (i've tried to find help on irc but people are busy !) to
> use ssl
>
> I read https://github.com/SynoCommunity/spksrc/wiki/
> Firefox-Sync-Server-1.5#ssl-configuration-with-haproxy
> but i don't understand (i'am french and it's really technical for me)
> i don't undestand :
>
> - Add a new backend: name ffsync, server sync localhost:8132 check
> - Add a new frontend: name sync, default backend ffsync and copy the
> binds and options content from the https frontend. Change the port to
> :8133. (Note that this step is needed if you want to be able to access
> the sync service on the same port internally and externally with an
> otherwise default setup of HAProxy. Otherwise, you may use the https
> frontend, which runs on port 5443 internally.)
> - Add a new association: frontend sync, backend ffsync, condition if {
> hdr_beg(HOST) -i sync. }.
>
>
> below there is my haproxy.cfg, could you give me an example of this file
> please ? (if i have an example, i just have to change for my case)
>
> tx you very much for you help,
> Frederic
>
> global
> log /dev/log local0
> log /dev/log local1 notice
> chroot /var/lib/haproxy
> stats socket /run/haproxy/admin.sock mode 660 level admin
> stats timeout 30s
> user haproxy
> group haproxy
> daemon
>
> # Default SSL material locations
> ca-base /etc/ssl/certs
> crt-base /etc/ssl/private
>
> # Default ciphers to use on SSL-enabled listening sockets.
> # For more information, see ciphers(1SSL). This list is from:
> # https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
> ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+
> AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+
> AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
> ssl-default-bind-options no-sslv3
>
> defaults
> log global
> mode http
> option httplog
> option dontlognull
> timeout connect 5000
> timeout client 50000
> timeout server 50000
> errorfile 400 /etc/haproxy/errors/400.http
> errorfile 403 /etc/haproxy/errors/403.http
> errorfile 408 /etc/haproxy/errors/408.http
> errorfile 500 /etc/haproxy/errors/500.http
> errorfile 502 /etc/haproxy/errors/502.http
> errorfile 503 /etc/haproxy/errors/503.http
> errorfile 504 /etc/haproxy/errors/504.http
>
> _______________________________________________
> Sync-dev mailing list
> Sync-dev@mozilla.org
> https://mail.mozilla.org/listinfo/sync-dev
>
>
_______________________________________________
Sync-dev mailing list
Sync-dev@mozilla.org
https://mail.mozilla.org/listinfo/sync-dev
