mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 10:18:54 +00:00
33 lines
902 B
Plaintext
33 lines
902 B
Plaintext
---
|
|
title: HAProxy
|
|
sidebar_position: 3
|
|
---
|
|
|
|
The following is an example reverse proxy configuration for [HAProxy](
|
|
https://www.haproxy.org/) proxy. We assume
|
|
`default['firezone']['phoenix']['port']` to be `13000` and the proxy running on
|
|
the same host as the Firezone app.
|
|
|
|
Since Firezone requires HTTPS for the web portal, please bear in mind a
|
|
downstream proxy will need to terminate SSL connections in this scenario.
|
|
|
|
You can also configure HAProxy to handle the SSL termination as explained
|
|
[here](https://www.haproxy.com/blog/haproxy-ssl-termination/) but take into
|
|
account that the `pem` file expected by `ssl crt` option needs to contain
|
|
both the `crt` and `key` file.
|
|
|
|
`/etc/haproxy/haproxy.cfg`:
|
|
|
|
```conf
|
|
defaults
|
|
mode http
|
|
|
|
frontend app1
|
|
bind *:80
|
|
option forwardfor
|
|
default_backend backend_app1
|
|
|
|
backend backend_app1
|
|
server mybackendserver 127.0.0.1:13000
|
|
```
|