EMBL-EBI-TSI/ansible-haproxy

Name: ansible-haproxy

Owner: EMBL-EBI Technology & Science Integration

Description: Ansible role to install and configure haproxy server

Created: 2017-07-10 11:02:41.0

Updated: 2017-07-10 15:08:48.0

Pushed: 2017-07-10 14:54:23.0

Homepage:

Size: 7

Language: null

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

HAProxy

Install and configure HAProxy server.

Requirements

See meta/main.yml.

Role Variables

All configuration happens in /etc/haproxy/haproxy.cfg based on the haproxy.cfg.j2 template. The template is divided in four sections:

• Defaults: contains the global and main-defaults for all other sections.
• TCP Proxies: contains the configuration for general tcp proxies combining frontends and backends. These are defined in haproxy_tcp_listens
• HTTP Proxies: contains the configuration for http frontend and backends, independently. These are defined in haproxy_http_frontends and haproxy_http_backends.
• Statistics frontend: configures HAProxy's stats frontend.

See default/main.yml for more details on the attributes available for tcp and http proxies, as well as the statistics frontend.

HAProxy can be configured with SSL by passing the appropiate configuration to the proxie, ie:

oxy_http_frontends:
name: https
bind: 0.0.0.0:443 ssl crt {{ssl_certs_combined_path}}

In the example above Galaxy role luisico.ansible-role-ssl-certs is used to provide the path to the SSL certificate.

Dependencies

Depends on a role that provides SSL certs if HAProxy is the SSL endpoint, ie luisico.ansible-role-ssl-certs.

Example Playbook

Example:

sts: servers
les:
- luisico.ansible-role-ssl-certs
- haproxy

TODO

None.

Licence

Released under the MIT license.

Author Information

Luis Gracia while at EMBL-EBI:

• luis.gracia [at] ebi.ac.uk
• GitHub at luisico
• Galaxy at luisico