http://www.yakakliker.org/index.php?action=history&feed=atom&title=Haproxy_%3A_Exemple_de_fichier_de_configuration 2026-05-02T03:45:53Z Historique des versions pour cette page sur le wiki MediaWiki 1.41.0 http://www.yakakliker.org/index.php?title=Haproxy_:_Exemple_de_fichier_de_configuration&diff=1979&oldid=prev 2026-02-18T09:05:57Z

<p>Page créée avec « === Exemple en frontal devant un serveur Nexus === &lt;syntaxhighlight lang=&quot;bash&quot;&gt; global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats socket /run/haproxy/admin.sock mode 660 level admin stats timeout 30s user haproxy group haproxy daemon # Default SSL material locations ca-base /etc/ssl/certs crt-base /etc/ssl/private # See: https://ssl-config.mozilla.org/#server=haproxy&amp;server-version=2.0.3&amp;config=intermediate... »</p> <p><b>Nouvelle page</b></p><div>=== Exemple en frontal devant un serveur Nexus ===<br /> &lt;syntaxhighlight lang=&quot;bash&quot;&gt;<br /> global<br /> log /dev/log local0<br /> log /dev/log local1 notice<br /> chroot /var/lib/haproxy<br /> stats socket /run/haproxy/admin.sock mode 660 level admin<br /> stats timeout 30s<br /> user haproxy<br /> group haproxy<br /> daemon<br /> <br /> # Default SSL material locations<br /> ca-base /etc/ssl/certs<br /> crt-base /etc/ssl/private<br /> <br /> # See: https://ssl-config.mozilla.org/#server=haproxy&amp;server-version=2.0.3&amp;config=intermediate<br /> ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384<br /> ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256<br /> ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets<br /> <br /> defaults<br /> log global<br /> mode http<br /> option httplog<br /> option dontlognull<br /> timeout connect 5000<br /> timeout client 50000<br /> timeout server 50000<br /> errorfile 400 /etc/haproxy/errors/400.http<br /> errorfile 403 /etc/haproxy/errors/403.http<br /> errorfile 408 /etc/haproxy/errors/408.http<br /> errorfile 500 /etc/haproxy/errors/500.http<br /> errorfile 502 /etc/haproxy/errors/502.http<br /> errorfile 503 /etc/haproxy/errors/503.http<br /> errorfile 504 /etc/haproxy/errors/504.http<br /> <br /> <br /> frontend https_in<br /> bind *:443 ssl crt /etc/haproxy/certs/wildcard.yakakliker.org/wildcard.yakakliker.org.pem<br /> mode http<br /> <br /> # Sécurité : Empêche l&#039;affichage de Nexus dans une iframe (anti-clickjacking)<br /> http-response set-header X-Frame-Options SAMEORIGIN<br /> http-response set-header X-Content-Type-Options nosniff<br /> <br /> # Transmission de l&#039;IP réelle du client à Nexus<br /> option forwardfor<br /> http-request set-header X-Forwarded-Proto https<br /> <br /> default_backend nexus_backend<br /> <br /> backend nexus_backend<br /> mode http<br /> # &#039;first&#039; choisit le premier serveur disponible avec des slots libres<br /> balance first<br /> <br /> # Compression pour accélérer l&#039;interface web Nexus<br /> compression algo gzip<br /> compression type text/html text/plain text/css application/javascript<br /> <br /> # Le serveur local<br /> server nexus_solo 127.0.0.1:8081 check inter 2000 rise 2 fall 3<br /> <br /> listen stats<br /> bind *:8080<br /> mode http<br /> stats enable<br /> stats uri /stats<br /> stats refresh 10s<br /> <br /> <br /> <br /> &lt;/syntaxhighlight&gt;<br /> [[Catégorie:Haproxy]]<br /> [[Catégorie:Nexus]]</div>

Administrateur