From 7fae0335c1a0e7d9f81252bf0a2ef75502b36424 Mon Sep 17 00:00:00 2001
From: do <do@maketank.net>
Date: Sun, 20 Mar 2022 17:06:19 +0100
Subject: [PATCH] auto01 and genie

---
 base/hostconfig/auto01.sls | 94 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 94 insertions(+)
 create mode 100644 base/hostconfig/auto01.sls

diff --git a/base/hostconfig/auto01.sls b/base/hostconfig/auto01.sls
new file mode 100644
index 0000000..f598a42
--- /dev/null
+++ b/base/hostconfig/auto01.sls
@@ -0,0 +1,94 @@
+pki:
+  cns:
+  - genie.chaos
+  - genie2.chaos
+haproxy:
+  enabled: True
+  overwrite: True
+  global:
+    stats:
+      enable: True
+      socketpath: /var/lib/haproxy/stats
+      mode: 660
+      level: admin
+      # Optional extra bind parameter, for example to set the owner/group on the socket file
+      extra: user haproxy group haproxy
+    ssl-default-bind-ciphers: "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384"
+    ssl-default-bind-options: "no-sslv3 no-tlsv10 no-tlsv11"
+
+    user: haproxy
+    group: haproxy
+    chroot:
+      enable: True
+      path: /var/lib/haproxy
+    daemon: True
+  defaults:
+    mode: http
+    stats:
+      - enable
+      - uri: '/haproxy-status'
+    options:
+      - httplog
+      - dontlognull
+      - forwardfor
+    timeouts:
+      - connect 5000
+      - client 50000
+      - server 50000
+      - tunnel 80000 #longer timeouts for websockets
+      - http-request 5s
+    errorfiles:
+      400: /etc/haproxy/errors/400.http
+      403: /etc/haproxy/errors/403.http
+      408: /etc/haproxy/errors/408.http
+      500: /etc/haproxy/errors/500.http
+      502: /etc/haproxy/errors/502.http
+      503: /etc/haproxy/errors/503.http
+      504: /etc/haproxy/errors/504.http
+  #resolvers:
+  #  local_dns:
+  #    options:
+  #      - nameserver resolvconf 192.168.10.1:53
+  #      - resolve_retries 3
+  #      - timeout retry 1s
+  #      - hold valid 10s
+  listens:
+    stats:
+      bind:
+        - "127.0.0.1:9110"
+      mode: http
+      stats:
+        enable: True
+        uri: "/haproxy-status"
+        refresh: "20s"
+  frontends:
+    frontend1:
+      name: www-http 
+      bind: 
+       - "*:80"
+      default_backend: genie
+      acls: 
+        - host_genie hdr_beg(host) -i genie.
+        - host_genie2 hdr_beg(host) -i genie2.
+      use_backends: 
+        - genie if host_genie
+        - genie2 if host_genie2
+  backends:
+    backend1:
+      name: genie
+      balance: roundrobin
+      servers:
+        server1:
+          name: genie
+          host: 127.0.0.1
+          port: 3000
+          check: check
+    backend2:
+      name: genie2
+      balance: roundrobin
+      servers:
+        server1:
+          name: genie2
+          host: 127.0.0.1
+          port: 8000
+          check: check
\ No newline at end of file