diff --git a/images/router/haproxy/conf/haproxy-config.template b/images/router/haproxy/conf/haproxy-config.template index cccce291f..02eeb1c93 100644 --- a/images/router/haproxy/conf/haproxy-config.template +++ b/images/router/haproxy/conf/haproxy-config.template @@ -131,6 +131,13 @@ global {{- end }} {{- end }} + # The user can provide a set of default supported groups using the ROUTER_CURVES variable. + # By default when a ROUTER_CURVES is not defined HAProxy + # will use its built-in default supported groups for TLS key exchange. + {{- if (env "ROUTER_CURVES") }} + ssl-default-bind-curves {{ env "ROUTER_CURVES" }} + {{- end }} + defaults {{- with $value := env "ROUTER_MAX_CONNECTIONS" "50000" }} {{- if isInteger $value }}