Josh Knapp 6fd07b4c54 fix(suspended): tolerate startup DNS failure + use docker_dns resolvers ...

If the upstream container isn't up when haproxy-manager starts (e.g. when
haproxy is recreated before whp-suspended), the default `init-addr libc` mode
makes haproxy refuse to start — taking down the whole proxy. Switched to
`init-addr last,none` (use last known address, fall back to 0.0.0.0 = DOWN)
and added `resolvers docker_dns` (defined in hap_header.tpl) so the real IP
is picked up once DNS becomes resolvable.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-13 11:52:50 -07:00

..

blocked_ip_page.html

Update blocked IP handling to use custom blocked page with 403 status

2025-08-22 08:36:57 -07:00

default_page.html

Add default backend page for unmatched domains

2025-07-11 19:10:05 -07:00

hap_backend_basic.tpl

Remove ACL-based security protections to eliminate false positives

2025-11-03 15:35:25 -08:00

hap_backend_http_check.tpl

Remove 40X rate limiting from HAProxy to prevent false positives

2025-08-30 08:54:55 -07:00

hap_backend.tpl

Add DNS resolver for automatic container IP re-resolution

2026-04-01 22:27:07 -07:00

hap_coraza_spoa_backend.tpl

fix(coraza): add deny rules that act on Coraza's verdict + spop-check on backend

2026-05-12 17:16:03 -07:00

hap_coraza_spoe_engine.tpl

fix(coraza-spoe): match upstream's required spoe shape (groups, arg order, names)

2026-05-12 17:12:09 -07:00

hap_default_backend.tpl

Fix HAProxy 2.6 compatibility for default backend

2025-07-11 19:27:42 -07:00

hap_header.tpl

Fix resolvers block placement — must be outside global section

2026-04-02 05:18:48 -07:00

hap_letsencrypt_backend.tpl

Fix Templates from causing errors with haproxy when added, Fix add notice when haproxy fails check

2025-02-21 06:28:51 -08:00

hap_letsencrypt.tpl

fix order of acls and backends, put db in volume

2025-02-20 16:26:27 -08:00

hap_listener.tpl

feat(suspension): opt-in routing for suspended hosts via bk_suspended backend

2026-05-13 11:46:18 -07:00

hap_path_acl.tpl

haproxy manager

2025-02-20 13:41:38 -08:00

hap_security_tables.tpl

Add rate limiting, connection limits, and timeout hardening

2026-03-31 10:00:53 -07:00

hap_subdomain_acl.tpl

Add separate SSE backend for secure Server-Sent Events support

2025-12-26 13:48:24 -08:00

hap_suspended_backend.tpl

fix(suspended): tolerate startup DNS failure + use docker_dns resolvers

2026-05-13 11:52:50 -07:00

hap_wildcard_acl.tpl

Add wildcard domain support with DNS-01 ACME challenge flow

2026-02-19 13:06:08 -08:00

index.html

Fix HAProxy 2.6 compatibility for default backend

2025-07-11 19:27:42 -07:00