global pidfile /var/run/haproxy.pid daemon user haproxy group haproxy stats socket /var/run/haproxy.socket user haproxy group haproxy mode 600 level admin node haproxy_%NIP% description haproxy server #* Performance Tuning maxconn 8192 spread-checks 3 quiet defaults #log global mode tcp option dontlognull option tcp-smart-accept option tcp-smart-connect #option dontlog-normal retries 3 option redispatch maxconn 8192 timeout check 3500ms timeout queue 3500ms timeout connect 3500ms timeout client 10800s timeout server 10800s userlist STATSUSERS group admin users admin user admin insecure-password Dc$@1910 user stats insecure-password Dc$@1910 listen admin_page bind *:9600 mode http stats enable stats refresh 60s stats uri / acl AuthOkay_ReadOnly http_auth(STATSUSERS) acl AuthOkay_Admin http_auth_group(STATSUSERS) admin stats http-request auth realm admin_page unless AuthOkay_ReadOnly # stats admin if AuthOkay_Admin listen haproxy_MySQL_3307_rw bind *:3307 mode tcp timeout client 10800s timeout server 10800s tcp-check expect string is\ running balance leastconn option tcp-check # option allbackups default-server port 9200 inter 2s downinter 5s rise 3 fall 2 slowstart 60s maxconn 64 maxqueue 128 weight 100 server 10.5.10.51 10.5.10.51:3306 check server 10.5.10.52 10.5.10.52:3306 check backup server 10.5.10.53 10.5.10.53:3306 check backup listen haproxy_MySQL_3308_ro bind *:3308 mode tcp timeout client 10800s timeout server 10800s tcp-check expect string is\ running balance leastconn option tcp-check # option allbackups default-server port 9200 inter 2s downinter 5s rise 3 fall 2 slowstart 60s maxconn 64 maxqueue 128 weight 100 server 10.5.10.51 10.5.10.51:3306 check server 10.5.10.52 10.5.10.52:3306 check server 10.5.10.53 10.5.10.53:3306 check backup listen haproxy__NGINX_http bind *:80 mode tcp timeout client 10800s timeout server 10800s tcp-check expect string is\ running balance leastconn option tcp-check # option allbackups default-server port 9200 inter 2s downinter 5s rise 3 fall 2 slowstart 60s maxconn 64 maxqueue 128 weight 100 cookie SERVERUSED insert indirect nocache server 10.5.10.120 10.5.10.120:80 cookie s1 server 10.5.10.121 10.5.10.121:80 cookie s2 listen haproxy__NGINX_https bind *:443 mode tcp timeout client 10800s timeout server 10800s tcp-check expect string is\ running balance leastconn option tcp-check # option allbackups default-server port 9200 inter 2s downinter 5s rise 3 fall 2 slowstart 60s maxconn 64 maxqueue 128 weight 100 cookie SERVERUSED insert indirect nocache server 10.5.10.120 10.5.10.120:443 cookie s1 server 10.5.10.121 10.5.10.121:443 cookie s2 listen haproxy__Gitea_http bind *:3000 mode tcp timeout client 10800s timeout server 10800s tcp-check expect string is\ running balance leastconn option tcp-check # option allbackups default-server port 9200 inter 2s downinter 5s rise 3 fall 2 slowstart 60s maxconn 64 maxqueue 128 weight 100 cookie SERVERUSED insert indirect nocache server 10.5.10.120 10.5.10.120:3000 cookie s1 server 10.5.10.121 10.5.10.121:3000 cookie s2 backup