Increase backend_fall value for haproxy_letsencrypt_service

Currently to get LetsEncrypt certificate, we spawn python http server for 5 seconds to get haproxy endpoint up and after it's terminated, we run certbot which is a backend for this endpoint.

With current haproxy backend settings(inter=2000,fall=2), certbot has only 4 seconds for certificate validation which is too short in many cases.

Changing backend_fall from 2 to 5 should solve the problem.

Change-Id: I0bf2fa4f9f0206264984d50376de8aa8396e3d09
This commit is contained in:
Damian Dabrowski 2021-05-06 14:06:39 +02:00 committed by Damian Dąbrowski
parent d54d2eaf54
commit e458786d2a

View File

@ -238,7 +238,7 @@ haproxy_letsencrypt_service:
haproxy_service_name: letsencrypt
haproxy_backend_nodes: "{{ groups['haproxy_all'] }}"
backend_rise: 1
backend_fall: 2
backend_fall: 5
haproxy_bind:
- 127.0.0.1
haproxy_port: "{{ haproxy_ssl_letsencrypt_certbot_backend_port }}"