<% our @prefixes = ('', 'www.', 'standby.'); -%> log connection # Wireguard endpoints of the k3s cluster nodes running in FreeBSD bhyve Linux VMs table { 192.168.2.110 } # Local OpenBSD httpd table { 127.0.0.1 ::1 } http protocol "https" { <% for my $host (@$acme_hosts) { for my $prefix (@prefixes) { -%> tls keypair <%= $prefix.$host -%> <% } } -%> tls keypair <%= $hostname.'.'.$domain -%> match request header set "X-Forwarded-For" value "$REMOTE_ADDR" <% for my $host (@$f3s_hosts) { for my $prefix (@prefixes) { -%> match request quick header "Host" value "<%= $prefix.$host -%>" forward to <% } } -%> } relay "https4" { listen on <%= $vio0_ip %> port 443 tls protocol "https" forward to port 8080 forward to port 80 check tcp } relay "https6" { listen on <%= $ipv6address->($hostname) %> port 443 tls protocol "https" forward to port 8080 forward to port 80 check tcp } tcp protocol "gemini" { tls keypair foo.zone tls keypair snonux.foo tls keypair paul.buetow.org tls keypair standby.foo.zone tls keypair standby.snonux.foo tls keypair standby.paul.buetow.org } relay "gemini4" { listen on <%= $vio0_ip %> port 1965 tls protocol "gemini" forward to 127.0.0.1 port 11965 } relay "gemini6" { listen on <%= $ipv6address->($hostname) %> port 1965 tls protocol "gemini" forward to 127.0.0.1 port 11965 }