Haproxy: Upgrade to haproxy 2.8 - Debian 12

- Use inline OSCP support - Add support for Sectigo ACME External account binding - Certs are placed in /etc/haproxy/certs - Make config haproxy 2.8 compatible
OpenConext · Apr 15, 2024 · cc5e109 · cc5e109
1 parent 946d3cd
commit cc5e109
Show file tree

Hide file tree

Showing 11 changed files with 128 additions and 741 deletions.
diff --git a/roles/haproxy/defaults/main.yml b/roles/haproxy/defaults/main.yml
@@ -24,3 +24,5 @@ haproxy_hsts_value: "max-age=34214400"
 # If you have a staging server you want to be accessed from certain ips, and them to this list
 haproxy_stagingips:
   - ''
+
+haproxy_acme: true
diff --git a/roles/haproxy/files/ffdhe3072.pem b/roles/haproxy/files/ffdhe3072.pem