#  vim:ts=4:sts=4:sw=4:et
#
#  Author: Hari Sekhon
#  Date: 2017-12-16 10:05:42 +0000 (Sat, 16 Dec 2017)
#
#  https://github.com/HariSekhon/HAProxy-configs
#
#  License: see accompanying Hari Sekhon LICENSE file
#
#  If you're using my code you're welcome to connect with me on LinkedIn and optionally send me feedback to help steer this or other code I publish
#
#  https://www.linkedin.com/in/HariSekhon
#

# ============================================================================ #
#                  H A P r o x y  -  E l a s t i c s e a r c h
#                                 +
#       X - P a c k   H e a l t h c h e c k   A u t h e n t i c a t i o n
# ============================================================================ #

frontend elasticsearch
    description "Elasticsearch with X-Pack Healthcheck Authentication"
    bind *:9200
    default_backend elasticsearch

backend elasticsearch
    description "Elasticsearch with X-Pack Healthcheck Authentication"
    balance roundrobin
    acl internal_networks src 192.168.0.0/16 172.16.0.0/12 10.0.0.0/8 127.0.0.1
    http-request deny if ! internal_networks
    # echo -n elastic:password | base64
    option httpchk GET / HTTP/1.0\r\nAuthorization:\ Basic\ ZWxhc3RpYzpwYXNzd29yZA==
    http-check expect string lucene_version
    timeout http-request 5s
    server elasticsearch elasticsearch:9200 check
    server docker docker:9200 check
    server 192.168.99.100 192.168.99.100:9200 check