Cavemanon/haproxy-protection
8
Fork 0
mirror of https://gitgud.io/fatchan/haproxy-protection.git synced 2025-05-09 02:05:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

Push ssl testing

Browse Source
This commit is contained in:
Thomas Lynch
2025-03-16 15:55:49 +11:00
parent 488eb02210
commit 30eb129bd8
13 changed files with 179 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
docker-compose.yml
View File

@ -27,6 +27,7 @@ services:
- HAPROXY_CONTINENT=OC
- HCAPTCHA_SITEKEY=20000000-ffff-ffff-ffff-000000000002
- HCAPTCHA_SECRET=0x0000000000000000000000000000000000000000
# - VERIFY_BACKEND_SSL=1
#- RECAPTCHA_SECRET=6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe
#- RECAPTCHA_SITEKEY=6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI
- CAPTCHA_COOKIE_SECRET=changeme
@ -52,11 +53,28 @@ services:
- ./nginx:/usr/share/nginx/html
nginx2:
build:
context: ./nginx2
dockerfile: Dockerfile
ports:
- 1082:80
- 1082:443
image: "nginx:latest"
volumes:
- ./nginx2:/usr/share/nginx/html
- ./nginx2/nginx.conf:/etc/nginx/conf.d/default.conf
- ./nginx2/nginx-certs:/etc/nginx/certs
nginx3:
build:
context: ./nginx2
dockerfile: Dockerfile
ports:
- 1083:443
image: "nginx:latest"
volumes:
- ./nginx3:/usr/share/nginx/html
- ./nginx3/nginx.conf:/etc/nginx/conf.d/default.conf
- ./nginx3/nginx-certs:/etc/nginx/certs
varnish:
network_mode: host

1
haproxy/map/ddos.map
View File

@ -1 +0,0 @@
localhost {"m":1,"t":false}

2
haproxy/map/hosts.map
View File

@ -0,0 +1,2 @@
localhost 127.0.0.1:1082|XX
localhost 127.0.0.1:1083|XX

5
nginx2/Dockerfile Normal file
View File

@ -0,0 +1,5 @@
FROM nginx:alpine
COPY nginx.conf /etc/nginx/conf.d/default.conf
COPY nginx-certs /etc/nginx/certs

19
nginx2/nginx-certs/nginx-selfsigned.crt Normal file
View File

@ -0,0 +1,19 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

28
nginx2/nginx-certs/nginx-selfsigned.key Normal file
View File

@ -0,0 +1,28 @@
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

20
nginx2/nginx.conf Normal file
View File

@ -0,0 +1,20 @@
server {
listen 80;
server_name localhost;
return 301 https://$host$request_uri; # Redirect HTTP to HTTPS
}
server {
listen 443 ssl;
server_name localhost;
ssl_certificate /etc/nginx/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/nginx/certs/nginx-selfsigned.key;
location / {
root /usr/share/nginx/html; # Change this to your document root
index index.html index.htm;
}
}

5
nginx3/Dockerfile Normal file
View File

@ -0,0 +1,5 @@
FROM nginx:alpine
COPY nginx.conf /etc/nginx/conf.d/default.conf
COPY nginx-certs /etc/nginx/certs

BIN
nginx3/favicon.ico Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 17 KiB

14
nginx3/index.html Normal file
View File

@ -0,0 +1,14 @@
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>test</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
</head>
<body>
<p>hello from nginx 3</p>
</body>
</html>

19
nginx3/nginx-certs/nginx-selfsigned.crt Normal file
View File

@ -0,0 +1,19 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

28
nginx3/nginx-certs/nginx-selfsigned.key Normal file
View File

@ -0,0 +1,28 @@
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

20
nginx3/nginx.conf Normal file
View File

@ -0,0 +1,20 @@
server {
listen 80;
server_name localhost;
return 301 https://$host$request_uri; # Redirect HTTP to HTTPS
}
server {
listen 443 ssl;
server_name localhost;
ssl_certificate /etc/nginx/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/nginx/certs/nginx-selfsigned.key;
location / {
root /usr/share/nginx/html; # Change this to your document root
index index.html index.htm;
}
}