Hi,
I’m new here, and I need help with my conf.
I have several server behind my Haproxy, everything works well but my wordpress is not working on mobile device. Works with all nav on desktop, but on mobile works only with safari.
Here’s my conf, problem is with dom7
global
log /dev/log local0
log /dev/log local1 notice
chroot /var/lib/haproxy
stats socket /run/haproxy/admin.sock mode 660 level admin
stats timeout 30s
user haproxy
group haproxy
daemon
ca-base /etc/ssl/certs
crt-base /etc/ssl/private
ssl-default-bind-ciphers xxxx
ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets
defaults
log global
mode http
option httplog
option dontlognull
timeout connect 5000
timeout client 50000
timeout server 50000
errorfile 400 /etc/haproxy/errors/400.http
errorfile 403 /etc/haproxy/errors/403.http
errorfile 408 /etc/haproxy/errors/408.http
errorfile 500 /etc/haproxy/errors/500.http
errorfile 502 /etc/haproxy/errors/502.http
errorfile 503 /etc/haproxy/errors/503.http
errorfile 504 /etc/haproxy/errors/504.http
frontend http-in
bind *:80
acl http ssl_fc,not
http-request redirect scheme https unless { ssl_fc }
frontend ft_https
bind *:443 ssl crt-list /etc/haproxy/certs/domains_list.txt
http-request add-header X-Forwarded-Proto https
default_backend bk_exchange
acl ft_owa hdr(host) -i ex1.xxxx
use_backend bk_exchange if ft_owa
acl letsencrypt-acl path_beg /.well-known/acme-challenge/
use_backend letsencrypt-back if letsencrypt-acl
acl host_dom1 hdr_end(host) -i autodiscover.xxxx
acl host_dom2 hdr_end(host) -i nextcloud.xxxx
use_backend bk_exchange if host_dom1
use_backend dom2-back if host_dom2
acl host_dom3 hdr_end(host) -i www.xxxxxx
use_backend dom5-back if host_dom3
acl host_dom6 hdr_end(host) -i xxxx
use_backend dom5-back if host_dom6
acl host_dom7 hdr_end(host) -i www.xxxx
use_backend dom7-back if host_dom7
backend bk_exchange
acl path_root url_len 1
acl path_exchange path_beg -i /autodiscover /owa /oab /ews /public /microsoft-server-activesync /rpc /mapi /favicon.ico
http-request deny unless path_exchange OR path_root
server exchange xxx.xxx.xxx.xxx:443 check ssl verify none
backend letsencrypt-back
server letsencrypt 127.0.0.1:8888
backend dom1-back
redirect scheme https if !{ ssl_fc }
server dom1 xxx.xxx.xxx.xxx:443
backend dom2-back
redirect scheme https if ! { ssl_fc }
server dom2 xxx.xxx.xxx.xxx:443 check ssl verify none
backend dom3-back
redirect scheme https if ! { ssl_fc }
server dom3 xxx.xxx.xxx.xxx:443 check ssl verify none
backend dom5-back
redirect scheme https if ! { ssl_fc }
server dom5 xxx.xxx.xxx.xxx:443 check ssl verify none
backend dom7-back
redirect scheme https if ! { ssl_fc }
server dom7 xxx.xxx.xxx.xxx:443 check ssl verify none