shadowdaoandClaude Sonnet 5.5
8787e0d99e
Visiting a server's own hostname (or its IP, or any unrouted name) on 80/443 could show the Coraza WAF block page. `use_backend default-backend` does not short-circuit http-request rules, so the catch-all was WAF-inspected with the full server-wide rule set like customer traffic; a browser on the server hostname also carries the control panel's cookies (not port-scoped). Unrouted requests are now answered by HAProxy itself with a tiny static page (errors/default-splash.html via `http-request return ... file`; 200 on "/", 404 elsewhere) placed before the SPOE call. "Routed" comes from routed_hosts.list / routed_wildcards.list, written by generate_config() from the same rows as the routing ACLs, port-stripped + lowercased (superset of the raw-Host routing ACLs), and part of the rollback set. ACME http-01, blocked IPs and suspended hosts keep their existing handling; rate limits and gates still run first. HAPROXY_DEFAULT_SPLASH=off restores the old behaviour. Page and template live in the image outside the /etc/haproxy named volume; the lists are generated on start, so image bump + recreate is the deploy. Tests: scripts/test-default-splash.py (in the image build), new splash-off scenario in validate-rendered-config.py. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0185ukXjXyosSkunDsdWz3mb
35 lines
1.6 KiB
HTML
35 lines
1.6 KiB
HTML
<!DOCTYPE html>
|
|
<!--
|
|
Default splash: served by HAProxy itself (`http-request return ... file`,
|
|
hap_listener.tpl) for any request whose Host is not routed to a site --
|
|
the server's own hostname, a bare IP, an unconfigured name. Static on
|
|
purpose: no version, no hostname echo, no customer data, no links (in
|
|
particular none into the control panel). Loaded with `file`, not
|
|
`lf-file`, so `%` is literal here and nothing from the request is
|
|
expanded into it. Must stay well under tune.bufsize (16 KB) or HAProxy
|
|
rejects the config.
|
|
-->
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<meta name="robots" content="noindex, nofollow">
|
|
<title>Web Hosting Platform</title>
|
|
<style>
|
|
:root{color-scheme:light dark;--bg:#f4f5f7;--card:#fff;--fg:#1d2330;--muted:#5b6475;--line:#dfe3ea}
|
|
@media (prefers-color-scheme:dark){:root{--bg:#0f1217;--card:#181c23;--fg:#e6e9ef;--muted:#9aa3b2;--line:#2a303a}}
|
|
html,body{margin:0;height:100%}
|
|
body{display:flex;align-items:center;justify-content:center;background:var(--bg);color:var(--fg);font:16px/1.5 system-ui,-apple-system,"Segoe UI",Roboto,sans-serif;padding:16px;box-sizing:border-box}
|
|
main{background:var(--card);border:1px solid var(--line);border-radius:10px;padding:32px 28px;max-width:480px;width:100%;text-align:center}
|
|
h1{font-size:1.25rem;margin:0 0 .5rem}
|
|
p{margin:0;color:var(--muted)}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<main>
|
|
<h1>Web Hosting Platform</h1>
|
|
<p>This server is operated by a web hosting platform. There is no website configured at this address.</p>
|
|
</main>
|
|
</body>
|
|
</html>
|