News for hackers. Stuff that matters.

A comment on HAProxy 1.8. Parent comment

Re:HAProxy 1.8 by djsumdog on Wednesday November 01, 2017 @10:33PM (#15607388)
I'm currently working on getting this setup myself. I eventually decided to exposing /var/run/docker.sock to my Certbot container and have a posthook that sends -HUP to the HAProxy container, which has a wrapper script that forwards HUP to haproxy's PID.

It would be nice if I could just do this via the HAProxy admin socket .. or not even reloading the whole config but just tell it to rescan the SSL certs.

[ Parent | on HN ]
Re:HAProxy 1.8 by mschuster91 on Thursday November 02, 2017 @05:32AM (#15608942)
> I eventually decided to exposing /var/run/docker.sock to my Certbot container

Don't do this, please. It is a security risk as access to the docker socket can be used to take over the entire system as root.

[ Parent | on HN ]