435a519b04
feat(haproxy): JSON tcplog с SNI capture на fe_https_sni (0.7.6).
2026-06-15 13:39:29 +10:00
779bf0d921
feat(haproxy): allowlist rds-allowed для RDS из ipdeny RU (0.7.5).
2026-06-13 19:06:54 +10:00
fc448fd589
feat(haproxy): Synology DSM heap и exchange с allowlist syno-allowed (0.7.4).
...
heap.kalinamall.ru → 192.168.160.185:5001, exchange.kalinamall.ru → 192.168.160.35:5001.
2026-06-13 16:54:06 +10:00
e3f968347d
feat(haproxy): HTTP-доступ к Zabbix с allowlist zabbix-allowed (0.7.3).
...
zabbix.kalinamall.ru:80 → 192.168.160.53, только IP из zabbix-allowed.
2026-06-13 16:48:54 +10:00
f802a5ac46
HAProxy 0.7.2: sac-api для Seaca, check-ssl на всех HTTPS-бэкендах.
...
Веб-SAC остаётся за allowlist; sac-api.kalinamall.ru открыт для мобильных клиентов. Документация по connection coalescing Git+SAC.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-13 12:01:06 +10:00
6eb396279f
HAProxy: sac.kalinamall.ru, allowlist git-sac-allowed и 1c-allowed
...
Добавлен SAC (192.168.160.145) с TLS на бэкенде. Git и SAC — IP из git-sac-allowed; 1С (erp) — из 1c-allowed. Обновлены README и docs/haproxy-install.md.
2026-06-01 12:00:18 +10:00
6a75c9b7a2
HAProxy: git.kalinamall.ru → 192.168.160.129, доступ только с 5.100.81.121
...
Made-with: Cursor
2026-04-27 08:58:46 +10:00
81e5819d0e
Remove RDP (3389); clients use RDS over HTTPS only
2026-04-11 19:58:49 +10:00
0e7f9b1dbe
haproxy: tcp-request reject before use_backend (fix parser warning)
2026-04-11 19:34:47 +10:00
642e22f26b
RDS: restore hostname k6a-dc3.b26.kalinamall.ru (keep :4430)
2026-04-11 19:33:13 +10:00
e81eaf091e
RDS: backend 192.168.160.40:4430, hostname b27 (SNI rds still on :443)
2026-04-11 19:32:34 +10:00
7e2ef061b6
Remove SSH (port 22) from HAProxy; drop ssh.lst and port-22 docs
2026-04-11 19:27:27 +10:00
b10e0c0439
Docs: port 22 conflict with sshd, bind alternatives and DNAT
2026-04-11 19:25:11 +10:00
212d564acf
haproxy: use tcp-request content reject after SNI (fix phase-order warning)
2026-04-11 19:22:37 +10:00
c411a4940b
Document OWA /owa under ext SNI (no extra HAProxy rules)
2026-04-11 18:33:31 +10:00
bbb1a5e2e2
Add SNI for autodiscover.kalinamall.ru to Exchange backend
2026-04-11 12:27:03 +10:00
6cd45fbc42
HAProxy: perimeter TCP+SNI for kalinamall.ru (Exchange, RDS, 1C, KSMG, RDP, SSH)
2026-04-11 12:14:18 +10:00
PTah