# HAProxy Config (Optional)

### Evennia, HTTPS and Secure Websockets can play nicely together, quickly.
May I suggest giving HAProxy 1.5+ a chance...

Installing HAProxy is usually as simple as:
```
# Redhat derivatives
yum install haproxy
# dnf instead of yum for very recent Fedora distros.
```
or
```
# Debian derivatives
apt install haproxy
```

Configuration of HAProxy requires a single file given as an argument on the command line:
```
haproxy -f /path/to/config.file
```

In it (example using haproxy 1.5.18 on Centos7):
```
# stuff provided by the default haproxy installs
global
    log /dev/log local0
    chroot /var/lib/haproxy
    maxconn  4000
    user  haproxy
defaults
    mode http
    option forwardfor

# Evennia Specifics
listen evennia-https-website
    bind <public-ip-address>:<public-SSL-port--probably-443> ssl no-sslv3 no-tlsv10 crt
/path/to/your-cert.pem
    server localhost 127.0.0.1:<evennia-web-port-probably-4001>

listen evennia-secure-websocket
    bind <public-ip-address>:<WEBSOCKET_CLIENT_URL 4002> ssl no-sslv3 no-tlsv10 crt /path/to/your-
cert.pem
    server localhost 127.0.0.1:<WEBSOCKET_CLIENT_URL 4002>
    timeout client 10m
    timeout server 10m
```

Then edit mygame/server/conf/settings.py and add:
```
WEBSERVER_INTERFACES = ['127.0.0.1']
WEBSOCKET_CLIENT_INTERFACE = '127.0.0.1'
```
or
```
LOCKDOWN_MODE=True
```
and
```
WEBSOCKET_CLIENT_URL="wss://yourhost.com:4002/"
```