From e458786d2aa88df7dd7b61beee03d7562083e2a0 Mon Sep 17 00:00:00 2001 From: Damian Dabrowski Date: Thu, 6 May 2021 14:06:39 +0200 Subject: [PATCH] Increase backend_fall value for haproxy_letsencrypt_service Currently to get LetsEncrypt certificate, we spawn python http server for 5 seconds to get haproxy endpoint up and after it's terminated, we run certbot which is a backend for this endpoint. With current haproxy backend settings(inter=2000,fall=2), certbot has only 4 seconds for certificate validation which is too short in many cases. Changing backend_fall from 2 to 5 should solve the problem. Change-Id: I0bf2fa4f9f0206264984d50376de8aa8396e3d09 --- inventory/group_vars/haproxy/haproxy.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inventory/group_vars/haproxy/haproxy.yml b/inventory/group_vars/haproxy/haproxy.yml index 814b8128ad..3d226e5311 100644 --- a/inventory/group_vars/haproxy/haproxy.yml +++ b/inventory/group_vars/haproxy/haproxy.yml @@ -238,7 +238,7 @@ haproxy_letsencrypt_service: haproxy_service_name: letsencrypt haproxy_backend_nodes: "{{ groups['haproxy_all'] }}" backend_rise: 1 - backend_fall: 2 + backend_fall: 5 haproxy_bind: - 127.0.0.1 haproxy_port: "{{ haproxy_ssl_letsencrypt_certbot_backend_port }}"