diff options
| author | Daniil Baturin <daniil@vyos.io> | 2024-04-16 17:06:37 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-04-16 17:06:37 +0200 |
| commit | c0eec365e2e35afe8162304d065f944ff0c42575 (patch) | |
| tree | eeb4ee4e22837ed9453b439a77c155198f655081 /data | |
| parent | 42082cba2f0e8c01da006bca45c3fdfa7d85c7ec (diff) | |
| parent | aafe22d08bb38a579dd5075fd27a1b88beeca791 (diff) | |
| download | vyos-1x-c0eec365e2e35afe8162304d065f944ff0c42575.tar.gz vyos-1x-c0eec365e2e35afe8162304d065f944ff0c42575.zip | |
Merge pull request #3315 from Embezzle/T6242
T6242: load-balancing reverse-proxy: Ability for ssl backends to not verify server certificates
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/load-balancing/haproxy.cfg.j2 | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/load-balancing/haproxy.cfg.j2 b/data/templates/load-balancing/haproxy.cfg.j2 index 849cef74d..feb10d247 100644 --- a/data/templates/load-balancing/haproxy.cfg.j2 +++ b/data/templates/load-balancing/haproxy.cfg.j2 @@ -150,7 +150,7 @@ backend {{ back }} {% endfor %} {% endif %} {% if back_config.server is vyos_defined %} -{% set ssl_back = 'ssl ca-file /run/haproxy/' ~ back_config.ssl.ca_certificate ~ '.pem' if back_config.ssl.ca_certificate is vyos_defined else '' %} +{% set ssl_back = 'ssl ca-file /run/haproxy/' ~ back_config.ssl.ca_certificate ~ '.pem' if back_config.ssl.ca_certificate is vyos_defined else ('ssl verify none' if back_config.ssl.no_verify is vyos_defined else '') %} {% for server, server_config in back_config.server.items() %} server {{ server }} {{ server_config.address }}:{{ server_config.port }}{{ ' check' if server_config.check is vyos_defined }}{{ ' backup' if server_config.backup is vyos_defined }}{{ ' send-proxy' if server_config.send_proxy is vyos_defined }}{{ ' send-proxy-v2' if server_config.send_proxy_v2 is vyos_defined }} {{ ssl_back }} {% endfor %} |