Relegate lighttpd to only webserver work; replace Lighttpd proxy with HAproxy SNI #12
Labels
No Label
Blocked
Duplicate
On-hold
Peer-review
RFC
Wontfix
Blocked
Duplicate
In-progress
On-hold
Peer-review
RFC
Wontfix
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: AniNIX/Kapisi#12
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Rather than doing proxy config and SSL termination in the webserver, we can use HAProxy to hand the connection all the way down to application. This will let us move off a wildcard certificate and rebuild our certbot automation.
https://www.haproxy.com/blog/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension/
This issue has been resolved with moving to OpenResty.