joramk/haproxy repository overview

⁠HAProxy Alpine Docker image

⁠Feature list

• Full QUIC support and TLSv1.3 with OpenSSL 3.1.5+quic for amd64, arm64
• TLSv1.3 and limited QUIC and support with OpenSSL 3.3 for armv6, armv7
• Latest Alpine 3.20 base image
• Includes python3 and LUA 5.3 scripting
• Prometheus export enabled
• TCP fast open enabled

⁠Supported tags and respective Dockerfile links

• 3.0-lts, 3.0, latest⁠
• 2.9⁠
• 2.8-lts, 2.8⁠
• 2.6-lts, 2.6⁠
• 2.4-lts, 2.4⁠
• 2.2-lts, 2.2⁠
• 3.1-dev, 3.1, devel⁠

⁠How to run

docker run -d -p 80:80 -p 443:443 --restart=unless-stopped \
    -v /etc/docker/letsencrypt:/etc/letsencrypt \
    -v /etc/docker/haproxy:/usr/local/etc/haproxy \
    -e "TIMEZONE=Europe/Berlin" \
    -e "HAPROXY_LETSENCRYPT=1" \
    -e "HAPROXY_LETSENCRYPT_OCSP=1" \
    -e "HAPROXY_LETSENCRYPT_RENEW=1" \
    -e "HAPROXY_INCROND=1" \
joramk/haproxy:latest 

⁠Environment variables

• HAPROXY_INCROND=1 Enable or disable monitoring of configuration changes in order to reload HAProxy
• HAPROXY_LETSENCRYPT=1 Enable automatic issuing of certificates
• HAPROXY_LETSENCRYPT_OCSP=1 Enable stapling and renewing OCSP responses periodically
• HAPROXY_LETSENCRYPT_RENEW=1 Enable automatic renewal of certificates via certbot
• HAPROXY_LETSENCRYPT_INCROND=1 Enable monitoring of certificate changes in order to reload HAProxy
• [email protected] Replace the star with an domain and enter the email you want to use for issuing a TLS encryption certificate (i.e. example.org and [email protected]⁠)

⁠Working with certificates

⁠Issue new certificate

docker exec -ti <container_name> certbot-issue example.tld [email protected] 

⁠Manually renew certificates

docker exec -ti <container_name> certbot-renew --force-renewal

⁠Supported architectures

amd64, arm64, armv6, armv7

⁠Repository and bug reports

Public repository: https://github.com/joramk/haproxy⁠

Please see https://github.com/joramk/haproxy/issues⁠ for known issues or filing a bug report.