Bon, ça fait plusieurs jours que j'essaie de faire marcher let's encrypt avec haproxy et j'y arrive pas
Je suis le tuto dédié : https://www.haproxy.com/blog/haproxy-and-let-s-encrypt
J'ai donc la config attachée au post (qui ne fait rien d'autre que renvoyer mon thumbprint acme si le chemin demandé contient '/.well-known/acme-challenge')
En http classique ça fonctionne nickel : si je curl sur http://domaine/.well-known/acme-challenge/aeiou il me renvoie aeiou.thumbprint ce qui est ce qu'il faut
Par contre dès que je curl en https j'ai droit à OpenSSL/3.0.13: error:0A000458:SSL routines::tlsv1 unrecognized name
Aidez moi s'il vous plait il fait trop chaud
#haproxy #LetsEncrypt

@dvl Hi! Thanks for your blog post https://dan.langille.org/2025/05/03/implement-anubis-to-give-the-bots-a-harder-time/

I find it very useful.

Did a quick writeup of how I use #anubis behind #haproxy in my #homelab.

https://mktbs.net/blog/2025/05/19/running-anubis-behind-haproxy/

Thanks to @cadey for the project. Support them!

“AWS-LC looks like a very active project with a strong community. […] Even the recently reported performance issue was quickly fixed and released with the next version. […] This is definitely a library that anyone interested in the topic should monitor.”

#OpenSSL #BoringSSL #WolfSSL #AWSLC #HAProxy #OpenSource #FreeSoftware #FOSS #OSS #TLS #QUIC
https://www.haproxy.com/blog/state-of-ssl-stacks

Le numéro mai-juin de Linux Pratique (disponible en kiosque dans une semaine) contient mon nouvel article traitant de la gestion de #haproxy à l'aide de #terraform.
Si vous le lisez, n'hésitez pas à me partager vos retours

# webfinger
location /.well-known/webfinger {
    proxy_pass http://localhost:8001;
    proxy_set_header Host $http_host;
    proxy_set_header X-Forwarded-For $remote_addr;
}

I've performed some tests, and it's great. #snac and #haproxy are working great together - now with caching of media and json responses, to scale up, and up, and up...and up!
#Varnish is the best tool for caching, but the setup I've tested doesn't require it and it's still good enough.
I think this will be a blog post, as soon as I'll have enough time.

@stefano @itnotes
connection to #haproxy works fine, including TLS offloading. connection from #haproxy to #snac also works fine.
I guess I still need to convert the #apache or #nginx proxying to work properly….

trying to setup #snac behind #haproxy
if all works well, will connect to another instance
@itnotes

random #HAProxy tip:

"My app has an endpoint that streams data for a long time, and my clients keep getting disconnected". They're probably disconnected because, when data is streaming, HAProxy doesn't hear back from the client. You need to increase "timeout client", but you probably don't want to do that site-wide. Set a timeout specific to that endpoint:
http-request set-timeout client 2h if { path -m beg /index.php/apps/music/api/ }

Who are the #HAProxy experts in my timeline?

Look what I've found while reading #haproxy docs : #YouPorn is implemented as a LAMP stack and serves 300.000 requests per second !
That's massive.

https://www.haproxy.org/they-use-it.html
https://highscalability.com/youporn-targeting-200-million-views-a-day-and-beyond/

The #s390x open source software team at IBM confirms the latest versions of various software packages run well on #Linux on #IBMZ & #LinuxONE

In December 2024 validation was maintained for over 30 projects, including @ApacheKafka
#HAProxy #SonarQube

We also saw community CI added for the Zxilly go-site-analyzer, and the Zig programming language, along with CI & binaries for ruri and scie-jump

Full report + how to apply for your own s390x VM for your project: https://community.ibm.com/community/user/ibmz-and-linuxone/blogs/elizabeth-k-joseph1/2025/02/07/linuxone-open-source-report-december-2024

Building a local cloud solution for our local parent association.

Using a Lenovo ThinkCentre Micro to host YunoHost and on top of that hosting Nextcloud and Grav CMS. For now at least. Can't tell you how smooth this has been.

Upgrading now to use HAProxy to be the front end on a public cloud provider, Swedish of course, and use Netbird, thus wireguard, to create tunnels between the proxy and the local server.

Whish me luck.