From dd51e89abf01ef8d5be3a34f1504bc973e7c902d Mon Sep 17 00:00:00 2001 From: Richie Cahill Date: Thu, 27 Aug 2026 09:08:07 -0400 Subject: [PATCH] fix(haproxy): use IPv6 wildcard for dual-stack listeners Bind HTTP, HTTPS, and Gitea SSH to [::] with v4v6 support. --- systems/portal-1/haproxy/haproxy.cfg | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/systems/portal-1/haproxy/haproxy.cfg b/systems/portal-1/haproxy/haproxy.cfg index 36ada84..e2027fb 100644 --- a/systems/portal-1/haproxy/haproxy.cfg +++ b/systems/portal-1/haproxy/haproxy.cfg @@ -22,8 +22,8 @@ defaults #Application Setup frontend ContentSwitching - bind *:80 v4v6 - bind *:443 v4v6 ssl crt /var/lib/acme/audiobookshelf.tmmworkshop.com/full.pem crt /var/lib/acme/cache.tmmworkshop.com/full.pem crt /var/lib/acme/gems.tmmworkshop.com/full.pem crt /var/lib/acme/jellyfin.tmmworkshop.com/full.pem crt /var/lib/acme/share.tmmworkshop.com/full.pem crt /var/lib/acme/gitea.tmmworkshop.com/full.pem crt /var/lib/acme/www.norn-sight.com/full.pem + bind [::]:80 v4v6 + bind [::]:443 v4v6 ssl crt /var/lib/acme/audiobookshelf.tmmworkshop.com/full.pem crt /var/lib/acme/cache.tmmworkshop.com/full.pem crt /var/lib/acme/gems.tmmworkshop.com/full.pem crt /var/lib/acme/jellyfin.tmmworkshop.com/full.pem crt /var/lib/acme/share.tmmworkshop.com/full.pem crt /var/lib/acme/gitea.tmmworkshop.com/full.pem crt /var/lib/acme/www.norn-sight.com/full.pem mode http # ACME challenge routing (must be first) @@ -113,7 +113,7 @@ frontend ContentSwitching # Proxy Gitea's built-in SSH server over Tailscale to Jeeves. Port 22 remains # available to Endlessh on Portal. frontend GiteaSSH - bind *:2223 v4v6 + bind [::]:2223 v4v6 mode tcp option tcplog default_backend gitea_ssh