• William Lallemand's avatar
    haproxy: deploy script can update existing certificate over stats socket · 0f7be905
    William Lallemand authored
    Since version 2.2, HAProxy is able to update dynamically certificates,
    without a reload.
    
    This patch uses socat to push the certificate into HAProxy in order to
    achieve hot update. With this method, reloading is not required.
    This should be used only to update an existing certificate in haproxy.
    
    2 new variables are available:
    
    - DEPLOY_HAPROXY_HOT_UPDATE="yes" update over the stats socket instead
      of reloading
    
    - DEPLOY_HAPROXY_STATS_SOCKET="UNIX:/run/haproxy/admin.sock" set the path on
      the stats socket.
    0f7be905
haproxy.sh 12.7 KB