fix tls redirect acl

python · Dec 18, 2024 · 56a4569 · 56a4569
1 parent 6a285da
commit 56a4569
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/salt/haproxy/config/haproxy.cfg.jinja b/salt/haproxy/config/haproxy.cfg.jinja
@@ -89,7 +89,6 @@ frontend main
     bind :20001 accept-proxy
     bind 0.0.0.0:80
     bind :::80
-    bind 127.0.0.1:19001  # This is our TLS socket.
 
     # HTTPS Binds
     # Advertise http/1.1 over NPN to enable TLS False Start
@@ -134,7 +133,7 @@ frontend main
     use_backend letsencrypt-well-known if letsencrypt-well-known-acl
 
     # Determine if this request has TLS on the client side or not.
-    acl is_tls dst_port 19001
+    acl is_tls ssl_fc
 
     acl our_domains hdr(host) -i -f /etc/haproxy/our_domains