Hostname: web01
Service name:
This is the central webserver of VZFFNRMO. Static sites are served directly. Other services are proxied to dedicated servers.
Structure:
Internet
|
+----------+----------+
| |
HTTP :80 HTTPS :443
| |
v v
+----------------+ +--------------------+
| HAProxy | | HAProxy |
| HTTP Frontend | | HTTPS Frontend |
| | | |
| ACME Challenge | | TLS Termination |
| Ausleitung | | Host / Path ACLs |
| | +---------+----------+
| Firmware Host | |
| direkt HTTP | |
| | |
| sonst: | |
| Redirect 301 | |
| to HTTPS | |
+-------+--------+ |
| |
+--------+---------+ |
| | |
v v |
+-------------+ +------------+ |
| ACME | | Firmware | |
| Backend | | Server |<------+
+-------------+ | firmware01 | |
+------------+ |
|
+---------------+------------------+
| |
| statische Hosts | spezifische Dienste
| |
v v
+-------------------+ +----------------------+
| NGINX | | Backend Routing |
| Static Web | +----------+-----------+
| | |
| HTTP :8080 | +---------+---------+
+---------+---------+ | |
| | |
+-------+-------+ v v
| | | +---------------+ +---------------+
v v v | Server A | | Server B |
/srv/http/... | Service 1 | | Service 2 |
| :3000 | | :3000 |
vzffnrmo.de +---------------+ +---------------+
ka-nix.de
karlsruhe.freifunk.net
The web requets come in both via HTTPS and HTTP. HTTP requests are either processed (acme + firmware) or are redirected to HTTPS.
HTTPS requests are split into static sites and other services. Static site requsts are passed to nginx running on the same server.
Other services are proxied to their respective servers.