albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Testing HAProxy IPv6

Browse source
This commit is contained in:
albert 2025-03-09 12:04:12 -07:00
parent 150adc5f92
commit d417a259f2
Signed by: albert
GPG key ID: 3895DD267CA11BA9
1 changed files with 19 additions and 7 deletions

26
nixos/hosts/frankfurt-linode-01/firewall.nix
View file

@ -63,7 +63,8 @@
frontend http frontend http
mode http mode http
bind :80 # bind :80
bind :::80 v4v6
# bind :443 ssl crt /Storage/Data/Docker/sysctl.io/letsencrypt/external/*.sysctl.io/combined.pem # bind :443 ssl crt /Storage/Data/Docker/sysctl.io/letsencrypt/external/*.sysctl.io/combined.pem
acl is-blocked-ip src -f /etc/haproxy-blocked-ips acl is-blocked-ip src -f /etc/haproxy-blocked-ips
@ -80,10 +81,13 @@
frontend tcp frontend tcp
mode tcp mode tcp
bind :25565 # bind :25565
bind :4443 # bind :4443
bind :443 # bind :443
bind :::25565 v4v6
bind :::4443 v4v6
bind :::443 v4v6
acl is-blocked-ip src -f /etc/haproxy-blocked-ips acl is-blocked-ip src -f /etc/haproxy-blocked-ips
http-request deny if is-blocked-ip http-request deny if is-blocked-ip
@ -100,14 +104,22 @@
bind :587 bind :587
bind :993 bind :993
bind :4190 bind :4190
default_backend backend_mail
bind :::25 v4v6
bind :::143 v4v6
bind :::465 v4v6
bind :::587 v4v6
bind :::993 v4v6
bind :::4190 v4v6
backend backend_mail backend backend_mail
mode tcp mode tcp
server mailserver-wg 10.100.1.3 server mailserver-wg 10.100.1.3
frontend vintage-story frontend vintage-story
mode tcp mode tcp
bind :42420 # bind :42420
bind :::42420 v4v6
default_backend backend_vintage-story default_backend backend_vintage-story
backend backend_vintage-story backend backend_vintage-story
mode tcp mode tcp