stuff

triple-dezert/proxied/frontproxy.nix

@@ -94,6 +94,11 @@ in
           services.haproxy.enable = true;
           services.haproxy.config = import ./haproxy-config.nix { inherit lib domains proxied; };
           networking.hosts = hosts;
+          systemd.tmpfiles.settings."asdf"."/run/haproxy".D = {
+            user = "haproxy";
+            group = "haproxy";
+            mode = "700";
+          };
         };
     };
 }

triple-dezert/proxied/haproxy-config.nix

@@ -45,6 +45,7 @@ in
     tune.ssl.lifetime 24h
     zero-warning
     log 127.0.0.1 syslog debug
+    stats socket /run/haproxy/admin.sock user haproxy group haproxy mode 660 level admin
 
 
   defaults