1. 01 Dec, 2023 1 commit
    • William Lallemand's avatar
      haproxy; don't use '*' in the filename for wildcard domain · e09d45c8
      William Lallemand authored
      By default acme.sh uses the '*' character in the filename for wildcard.
      That can be confusing within HAProxy since the * character in front of a
      filename in the stat socket is used to specified an uncommitted
      transaction.
      
      This patch replace the '*' by a '_' in the filename.
      This is only done when using the default filename, the name can still be
      forced with an asterisk.
      e09d45c8
  2. 30 Nov, 2023 4 commits
    • William Lallemand's avatar
      haproxy: use the master CLI for hot update · 36fc3210
      William Lallemand authored
      DEPLOY_HAPROXY_MASTER_CLI allows to use the HAProxy master CLI instead
      of a stats socket for DEPLOY_HAPROXY_HOT_UPDATE="yes"
      
      The syntax of the master CLI is slightly different, a prefix with the
      process number need to be added before any command.
      
      This patch uses ${_cmdpfx} in front of every socat commands which is
      filled when the master CLI is used.
      36fc3210
    • William Lallemand's avatar
      haproxy: deploy script can add a new certificate over the stats socket · 98a7a01d
      William Lallemand authored
      DEPLOY_HAPROXY_HOT_UPDATE="yes" now allows to add a new certificate
      within HAProxy instead of updating an existing one.
      
      In order to work, the ${DEPLOY_HAPROXY_PEM_PATH} value must be used as a
      parameter to the "crt" keyword in the haproxy configuration.
      
      The patch uses the following commands over HAProxy stats socket:
      - show ssl cert
      - new ssl cert
      - set ssl cert
      - commit ssl cert
      - add ssl crt-list
      98a7a01d
    • William Lallemand's avatar
      haproxy: deploy script can update existing certificate over stats socket · 0f7be905
      William Lallemand authored
      Since version 2.2, HAProxy is able to update dynamically certificates,
      without a reload.
      
      This patch uses socat to push the certificate into HAProxy in order to
      achieve hot update. With this method, reloading is not required.
      This should be used only to update an existing certificate in haproxy.
      
      2 new variables are available:
      
      - DEPLOY_HAPROXY_HOT_UPDATE="yes" update over the stats socket instead
        of reloading
      
      - DEPLOY_HAPROXY_STATS_SOCKET="UNIX:/run/haproxy/admin.sock" set the path on
        the stats socket.
      0f7be905
    • William Lallemand's avatar
      haproxy: sanitize the PEM in the deploy script · 7aaf4432
      William Lallemand authored
      Sanitize the PEM of the haproxy deploy script by removing the '\n', this
      way it could be injected directly over the CLI.
      7aaf4432
  3. 01 Nov, 2023 1 commit
  4. 24 Oct, 2023 1 commit
  5. 25 Sep, 2023 1 commit
  6. 11 Aug, 2023 1 commit
  7. 09 Aug, 2023 1 commit
  8. 18 Jul, 2023 4 commits
  9. 12 Jul, 2023 1 commit
  10. 11 Jul, 2023 2 commits
  11. 04 Jul, 2023 3 commits
  12. 28 May, 2023 2 commits
  13. 24 May, 2023 1 commit
  14. 17 May, 2023 1 commit
  15. 15 May, 2023 2 commits
  16. 24 Apr, 2023 1 commit
  17. 23 Apr, 2023 2 commits
  18. 12 Apr, 2023 1 commit
  19. 31 Mar, 2023 1 commit
  20. 28 Jan, 2023 4 commits
  21. 19 Jan, 2023 1 commit
  22. 27 Dec, 2022 1 commit
  23. 23 Dec, 2022 3 commits