ISTI-ansible-roles
/
ansible-role-haproxy
4
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
Role that installs haproxy https://www.haproxy.org
42 Commits 1 Branch 0 Tags 86 KiB
Perl 47.8%
Jinja 45.9%
Shell 6.3%
Go to file
Andrea Dell'Amico bdc67f85be
Nuovo default: 2.4 		2021-07-08 16:37:51 +02:00
defaults Nuovo default: 2.4 2021-07-08 16:37:51 +02:00
files Install the container as a stack. Install a bare configuration 2020-10-01 17:27:01 +02:00
handlers Import the old haproxy role. 2020-06-22 13:41:05 +02:00
meta Support the installation of haproxy as docker service 2020-09-30 15:19:54 +02:00
tasks Fixes #20686. Incorrect x509 certificate chain. 2021-02-10 15:51:32 +01:00
templates Optional port for the shinyproxy metrics. 2021-04-11 19:22:32 +02:00
tests Initial commit 2020-06-22 13:28:56 +02:00
vars Create a overlay network as external, attach to that one 2020-10-12 17:38:01 +02:00
.gitignore Initial commit 2020-06-22 13:28:56 +02:00
LICENSE Initial commit 2020-06-22 13:28:56 +02:00
README.md Import the old haproxy role. 2020-06-22 13:41:05 +02:00

README.md

Role Name

A role that installs Haproxy, https://www.haproxy.org.

Role Variables

The most important variables are listed below:

haproxy_latest_release: True
haproxy_version: 2.0
haproxy_repo_key: 'http://haproxy.debian.net/bernat.debian.org.gpg'
haproxy_debian_latest_repo: "deb http://haproxy.debian.net {{ ansible_lsb.codename }}-backports-{{ haproxy_version }} main"
haproxy_ubuntu_latest_repo: "ppa:vbernat/haproxy-{{ haproxy_version }}"
haproxy_pkg_state: latest
haproxy_enabled: True
haproxy_k_bind_non_local_ip: True

haproxy_default_port: 80
haproxy_terminate_tls: False
haproxy_ssl_port: 443
haproxy_admin_port: 8880
haproxy_admin_socket: /run/haproxy/admin.sock

haproxy_letsencrypt_managed: True
haproxy_cert_dir: '{{ pki_dir }}/haproxy'

haproxy_nagios_check: False
# It's a percentage
haproxy_nagios_check_w: 70
haproxy_nagios_check_c: 90

haproxy_check_interval: 3s
haproxy_backend_maxconn: 2048

haproxy_sysctl_conntrack_max: 131072

Additional tasks

The user of this role will need to write a haproxy.cfg template and install it with a dedicated task. Something like

- name: Configure haproxy
  template: src=haproxy.cfg.j2 dest=/etc/haproxy/haproxy.cfg owner=root group=haproxy mode=0440
  notify: Reload haproxy
  tags: [ 'haproxy', 'haproxy_conf' ]

Dependencies

  • letsencrypt-acme-sh

License

EUPL-1.2

Author Information

Andrea Dell’Amico, andrea.dellamico@isti.cnr.it