mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-28 21:17:36 +00:00
CyberMind-FR
c0c65fcb51
Two board-stability fixes verified live on gk2 during the assist deploy: - secubox-aggregator-watchdog.sh: 480s startup grace so the auto-heal watchdog stops restart-looping the aggregator during its slow (~5min) in-process cold mount (RuntimeDirectoryPreserve stale socket → probe fails → kill mid-start). - secubox-proxypac wpad-vhost: listen :9080 not :80 (HAProxy owns :80; the bind conflict aborted every nginx reload, silently freezing config board-wide). Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
18 lines
684 B
Plaintext
18 lines
684 B
Plaintext
# secubox-proxypac — WPAD auto-discovery vhost (LAN + mesh only, never public)
|
|
server {
|
|
# Listen on the internal SecuBox nginx port (HAProxy fronts :80/:443 and
|
|
# routes wpad.<domain> here by Host). A bare `listen 80;` collides with
|
|
# HAProxy's :80 and makes EVERY `nginx -s reload` abort on the bind, so
|
|
# config changes silently stop applying board-wide. See
|
|
# project_gk2_nginx_multimaster_blocker.
|
|
listen 9080;
|
|
server_name wpad.gk2.secubox.in;
|
|
allow 192.168.0.0/16;
|
|
allow 10.10.0.0/24;
|
|
deny all;
|
|
location = /wpad.dat {
|
|
default_type application/x-ns-proxy-autoconfig;
|
|
alias /var/lib/secubox/proxypac/proxy.pac;
|
|
}
|
|
}
|