Created
March 6, 2012 08:00
-
-
Save daemonza/1984822 to your computer and use it in GitHub Desktop.
Pound SSL redirect configuration file
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
###################################################################### | |
# Pound configuration to route SSL requests to HAproxy and then let | |
# HAproxy load balance the rest of the services. | |
# | |
## global options: | |
User "www-data" | |
Group "www-data" | |
#RootJail "/chroot/pound" | |
## Logging: (goes to syslog by default) | |
## 0 no logging | |
## 1 normal | |
## 2 extended | |
## 3 Apache-style (common log format) | |
LogLevel 1 | |
## check backend every X secs: | |
Alive 30 | |
## use hardware-accelleration card supported by openssl(1): | |
#SSLEngine "<hw>" | |
# poundctl control socket | |
Control "/var/run/pound/poundctl.socket" | |
###################################################################### | |
## listen, redirect and ... to: | |
## redirect all requests on port 8080 ("ListenHTTP") to the local webserver (see "Service" below): | |
ListenHTTPS | |
Address 10.0.0.125 ## This should be your outside IP | |
Port 443 | |
Cert "/etc/pound/ha.pem" | |
## allow PUT and DELETE also (by default only GET, POST and HEAD)?: | |
#xHTTP 0 | |
Service | |
BackEnd | |
Address 192.168.1.125 # Inside IP of same server where HAproxy lives | |
Port 80 | |
End | |
End | |
End |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment