diff --git a/Ansible/roles/router/files/haproxy.cfg b/Ansible/roles/router/files/haproxy.cfg index 34e85fec2ccc3a6527338a126e2de970adea7699..94830ff6ee1bfb149da14f156e99d6a4ccb594a8 100644 --- a/Ansible/roles/router/files/haproxy.cfg +++ b/Ansible/roles/router/files/haproxy.cfg @@ -58,12 +58,19 @@ frontend https acl private_ip src 62.219.131.121 acl shore_ip src 62.219.131.121 acl shore_ip src 163.172.74.36 + acl ssh req.payload(0,7) -m str "SSH-2.0" + acl ssl req_ssl_hello_type 1 tcp-request content reject if lam !private_ip tcp-request content reject if auth !shore_ip !private_ip - tcp-request content accept if { req_ssl_hello_type 1 } + tcp-request content accept if ssh ssl use_backend kodi_https if kodi + use_backend localhost_ssh if ssh default_backend host01_https +backend localhost_ssh + mode tcp + server ns1 127.0.0.1:22 check + backend host01_http mode http option forwardfor