mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 18:36:55 +00:00
Recurring "broken-by-vhost-add" bug: every haproxyctl vhost add ran cmd_generate which wiped operator-added backends (nginx_vhosts, gitea_ssh, webui-lan, …) and emitted the wrong cert path. cmd_generate now: - Writes to a tempfile, validates haproxy -c -f, then atomically installs via install(1). Live cfg is LEFT UNTOUCHED on failure. - DATA_PATH defaults to /data/haproxy (charter), /srv/haproxy fallback. HAPROXY_DATA_PATH env override. - Always emits mitmproxy_inspector + nginx_vhosts + webui_direct regardless of waf_enabled. - Reads /etc/haproxy/cfg.d/*.cfg as operator extras and appends them verbatim — webui-lan, gitea-ssh etc. survive regens. Co-authored-by: CyberMind-FR <gandalf@Gk2.net> |
||
|---|---|---|
| .. | ||
| api | ||
| debian | ||
| menu.d | ||
| nginx | ||
| sbin | ||
| tests | ||
| www/haproxy | ||
| README.md | ||
⚡ HAProxy
Load balancer with TLS 1.3
Category: Network
Screenshot
Features
- Backend management
- Stats
- ACLs
- SSL termination
- Health checks
Installation
# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash
# Install package
sudo apt install secubox-haproxy
Configuration
Configuration file: /etc/secubox/haproxy.toml
API Endpoints
GET /api/v1/haproxy/status- Module statusGET /api/v1/haproxy/health- Health check
License
MIT License - CyberMind © 2024-2026
