17 lines
548 B
Plaintext
17 lines
548 B
Plaintext
|
#
|
||
|
|
# BEGIN: bind-direct.cnf
|
||
|
|
#
|
||
|
|
bind :80
|
||
|
|
http-request redirect scheme https code 301 unless { ssl_fc }
|
||
|
|
http-request del-header ssl_client_cert unless { ssl_fc_has_crt }
|
||
|
|
http-request set-header ssl_client_cert -----BEGIN\ CERTIFICATE-----\ %[ssl_c_der,base64]\ -----END\ CERTIFICATE-----\ if { ssl_fc_has_crt }
|
||
|
|
bind :443 ssl crt /certs/chain.pem
|
||
|
|
|
||
|
|
|
||
|
|
# New line to test URI to see if its a letsencrypt request
|
||
|
|
acl letsencrypt-acl path_beg /.well-known/acme-challenge/
|
||
|
|
use_backend letsencrypt if letsencrypt-acl
|
||
|
|
#
|
||
|
|
# END: bind-direct.cnf
|
||
|
|
#
|