src/configuration/Proxies/Pound/pound.cfg

   1 ## Minimal sample pound.cfg
   2 ##
   3 ## see pound(8) for details
   4
   5
   6 ######################################################################
   7 ## global options:
   8
   9 User            "www-data"
  10 Group           "www-data"
  11 #RootJail       "/chroot/pound"
  12
  13 ## Logging: (goes to syslog by default)
  14 ##      0       no logging
  15 ##      1       normal
  16 ##      2       extended
  17 ##      3       Apache-style (common log format)
  18 LogLevel        1
  19
  20 ## check backend every X secs:
  21 Alive           30
  22
  23 ## use hardware-accelleration card supported by openssl(1):
  24 #SSLEngine      "<hw>"
  25
  26 # poundctl control socket
  27 Control "/var/run/pound/poundctl.socket"
  28
  29
  30 ######################################################################
  31 # HTTP Listener, redirects to HTTPS
  32 ListenHTTP
  33     Address 10.10.0.10
  34     Port    80
  35     Service
  36         Redirect "https://some.site.tld"
  37     End
  38 End
  39 ## HTTPS Listener
  40 ListenHTTPS
  41     Address      10.10.0.10
  42     Port         443
  43     AddHeader    "Front-End-Https: on"
  44     Cert         "/path/to/your/cert.pem"
  45     ## See 'man ciphers'.
  46     Ciphers      "TLSv1.2:TLSv1.1:!SSLv3:!SSLv2:EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA"
  47     Service
  48         BackEnd
  49             Address 10.20.0.10
  50             Port 80
  51         End
  52     End
  53 End