blob: fc7c9bce3fc2f56a94a780852f9766e13f7d4438 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
<% our @prefixes = ('', 'www.', 'standby.'); -%>
log connection
# Wireguard endpoints of the k3s cluster nodes running in FreeBSD bhyve Linux VMs
table <f3s> {
192.168.2.110
}
# Local OpenBSD httpd
table <localhost> {
127.0.0.1
::1
}
http protocol "https" {
<% for my $host (@$acme_hosts) { for my $prefix (@prefixes) { -%>
tls keypair <%= $prefix.$host -%>
<% } } -%>
tls keypair <%= $hostname.'.'.$domain -%>
match request header set "X-Forwarded-For" value "$REMOTE_ADDR"
<% for my $host (@$f3s_hosts) { for my $prefix (@prefixes) { -%>
match request quick header "Host" value "<%= $prefix.$host -%>" forward to <f3s>
<% } } -%>
}
relay "https4" {
listen on <%= $vio0_ip %> port 443 tls
protocol "https"
forward to <localhost> port 8080
forward to <f3s> port 80 check tcp
}
relay "https6" {
listen on <%= $ipv6address->($hostname) %> port 443 tls
protocol "https"
forward to <localhost> port 8080
forward to <f3s> port 80 check tcp
}
tcp protocol "gemini" {
tls keypair foo.zone
tls keypair snonux.foo
tls keypair paul.buetow.org
tls keypair standby.foo.zone
tls keypair standby.snonux.foo
tls keypair standby.paul.buetow.org
}
relay "gemini4" {
listen on <%= $vio0_ip %> port 1965 tls
protocol "gemini"
forward to 127.0.0.1 port 11965
}
relay "gemini6" {
listen on <%= $ipv6address->($hostname) %> port 1965 tls
protocol "gemini"
forward to 127.0.0.1 port 11965
}
|
