bugfixes for haproxy image and playbook

group_vars/all/main.yml

 ---
 
-dslproxy: "<CHANGE_ME:hostname>"
+dslproxy: "arne-centos2.cert-labs.uninett.no"
 
 # TheHive Button plugin
 THEHIVE_URL: "https://hive.gn4-3-wp8-soc.sunet.se/"

roles/build/files/haproxy.cfg

-global
-  quiet
-
-defaults
-  maxconn 5000
-  timeout connect 5s
-  timeout client  20s
-  timeout server  20s

roles/build/templates/haproxy/Dockerfile.j2

-FROM gn43-dsl/centos:7a20200612
+FROM gn43-dsl/centos:{{version}}{{suffix}}
 
 ENV HAPROXY_VERSION 2.2.3
 ENV HAPROXY_URL https://www.haproxy.org/download/2.2/src/haproxy-2.2.3.tar.gz
@@ -23,6 +23,7 @@ RUN \
   zlib-devel \
   iptables \
   pcre2-devel \
+  daemonize \
   pth-devel && \
   `# Install newest openssl...` \
   wget -O /tmp/openssl.tgz https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz && \
@@ -68,9 +69,3 @@ ENTRYPOINT ["/bin/bash"]
 # "when the SIGTERM signal is sent to the haproxy process, it immediately quits and all established connections are closed"
 # "graceful stop is triggered when the SIGUSR1 signal is sent to the haproxy process"
 STOPSIGNAL SIGUSR1
-
-COPY haproxy-entrypoint.sh /
-ENTRYPOINT ["/haproxy-entrypoint.sh"]
-
-COPY haproxy.cfg /usr/local/etc/haproxy/haproxy.cfg
-CMD ["haproxy", "-f", "/usr/local/etc/haproxy/haproxy.cfg"]

roles/docker/tasks/haproxy.yml

@@ -15,6 +15,8 @@
       - "9443:9443"
       - "9200:9200"
       - "7750:7750"
+    entrypoint: "/bin/bash"
+    interactive: "yes"
   tags:
     - start
 

roles/haproxy/tasks/main.yml

@@ -7,11 +7,13 @@
     dest: /usr/local/etc/haproxy/haproxy.cfg
   tags:
     - start
-    - reconf
 
-- name: Restart haproxy
-  shell: kill -USR2 1
+- name: Start haproxy
+  shell: "daemonize -c / -p /haproxy.pid /usr/local/sbin/haproxy -f /usr/local/etc/haproxy/haproxy.cfg"
   tags:
     - start
-    - reconf
+
+#- name: Stop haproxy
+#  tags:
+#    - stop
 

roles/haproxy/templates/haproxy.cfg.j2

@@ -27,7 +27,7 @@ listen nifiserv
 	balance source
 	option tcpka
 {% for nifihost in groups['nificontainers'] %}
-	server {{nifihost}} {{nifihost}}:9443 ssl check verify none
+	server {{nifihost}} {{nifihost}}:9443 check
 {% endfor %}
 
 listen odfeserv