mirror of https://github.com/certd/certd
24 lines
507 B
INI
24 lines
507 B
INI
|
##
|
||
|
|
# HTTPS listener
|
||
|
|
# - Send to ALPN responder port 4444 if protocol is acme-tls/1
|
||
|
|
# - Default to HTTPS backend port 4443
|
||
|
|
##
|
||
|
|
|
||
|
|
frontend https
|
||
|
|
mode tcp
|
||
|
|
bind :443
|
||
|
|
tcp-request inspect-delay 5s
|
||
|
|
tcp-request content accept if { req_ssl_hello_type 1 }
|
||
|
|
use_backend alpnresp if { req.ssl_alpn acme-tls/1 }
|
||
|
|
default_backend https
|
||
|
|
|
||
|
|
# Default HTTPS backend
|
||
|
|
backend https
|
||
|
|
mode tcp
|
||
|
|
server https 127.0.0.1:4443
|
||
|
|
|
||
|
|
# ACME tls-alpn-01 responder backend
|
||
|
|
backend alpnresp
|
||
|
|
mode tcp
|
||
|
|
server acmesh 127.0.0.1:4444
|