Closed hedefalk closed 8 years ago
So to be clear: commenting out use_backend ghost if { hdr(host) -i blog.woodenstake.se }
validation goes through.
Oh, I could just make a conjunctive acl:
acl url_acme_challenge path_beg /.well-known/acme-challenge/
http-request use-service lua.acme-http01 if METH_GET url_acme_challenge
redirect scheme https code 301 if { hdr(Host) -i repo.woodenstake.se } !{ ssl_fc }
redirect scheme https code 301 if { hdr(Host) -i jenkins.woodenstake.se } !{ ssl_fc }
acl host_blog hdr(host) -i blog.woodenstake.se
use_backend ghost if host_blog !url_acme_challenge
Still struggling with haproxys config language :)
But I wonder why the redirects doesn't bite here though? The validation works for those domains too…
@hedefalk
The use_backend
taking precedence over http-request use-service
is very likely a HAProxy bug worth reporting on the HAProxy mailing list. Great that you found a workaround though! :smile:
Still struggling with haproxys config language :)
Totally understandable. HAProxy config has kind of a steep learning curve.
@hedefalk I can't reproduce this on HAProxy 1.6.3. Which version were you using when you encountered this issue? Thanks!
@janeczku I have the same problem but I do redirect in backend like this:
backend accounts_backend
redirect scheme https if !{ ssl_fc }
....
with HA-Proxy version 1.7.6-1ppa1~xenial 2017/06/18
I'm back at trying to set up letsencrypt how I want it. The issue I'm having now is that for the only site I'm allowing http I'm using "use_backend" on the same frontend as the plugin is used. But that seems to interfer with this plugin and gets prio. So for the below http config, there's no problem for the redirected subdomains, but blog.woodenstake.se fails:
Any idea?