Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

reverse-proxy: T6370: Documented usage of http-response-headers option #1463

Merged
merged 1 commit into from
May 28, 2024
Merged

reverse-proxy: T6370: Documented usage of http-response-headers option #1463

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions docs/configuration/loadbalancing/reverse-proxy.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,11 @@

Set SSL certificate <name> for service <name>

.. cfgcmd:: set load-balancing reverse-proxy service <name>
http-response-headers <header-name> value <header-value>

Set custom HTTP headers to be included in all responses


Rules
^^^^^
Expand Down Expand Up @@ -155,6 +160,11 @@
Configure requests to the backend server to use SSL encryption without
validating server certificate

.. cfgcmd:: set load-balancing reverse-proxy backend <name>
http-response-headers <header-name> value <header-value>

Set custom HTTP headers to be included in all responses using the backend


HTTP health check
^^^^^^^^^^^^^^^^^
Expand Down Expand Up @@ -291,6 +301,7 @@

The ``https`` service listens on port 443 with backend ``bk-default`` to
handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination.
HSTS header is set with a 1-year expiry, to tell browsers to always use SSL for site.

Check warning on line 304 in docs/configuration/loadbalancing/reverse-proxy.rst

View workflow job for this annotation

GitHub Actions / lint 

Line too long: len=85

Rule 10 matches requests with the exact URL path ``/.well-known/xxx``
and redirects to location ``/certs/``.
Expand All @@ -313,6 +324,7 @@
set load-balancing reverse-proxy service https mode 'http'
set load-balancing reverse-proxy service https port '443'
set load-balancing reverse-proxy service https ssl certificate 'cert'
set load-balancing reverse-proxy service https http-response-headers Strict-Transport-Security value 'max-age=31536000'

set load-balancing reverse-proxy service https rule 10 url-path exact '/.well-known/xxx'
set load-balancing reverse-proxy service https rule 10 set redirect-location '/certs/'
Expand Down
Loading