On 11/8/23 10:11, Christoph Kukulies wrote:
frontend web80
bind 0.0.0.0:80 name web80
default_backend be-local-81
Normally you definitely would not want this in your production config...
typically any request coming in on port 80 should be redirected to https
without ever being sent to a backend webserver.
That config is only useful as-is for my CI pipeline. I have updated it
so it's much more in line with how my production setup is configured.
This is how I configure port 80:
frontend web80
description Redirect to https
bind 0.0.0.0:80 name web80
redirect scheme https
default_backend be_deny
backend be_deny
description Back end with no servers that denies all requests.
no log
log 127.0.0.1 len 65535 format rfc5424 local0 notice err
http-request deny
Thanks,
Shawn