easyhaproxy 6.2.0__tar.gz → 6.3.0__tar.gz

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: easyhaproxy
-Version: 6.2.0
+Version: 6.3.0
 Summary: HAProxy label based routing with service discovery for Docker, Swarm, and Kubernetes
 License: MIT License
         
@@ -113,7 +113,7 @@ EasyHAProxy is part of some projects:
 
 [![HAProxy Monitor](docs/dashboard_thumbnail.png)](docs/guides/dashboard.md)
 
-A real-time dashboard is available at `http://<host>:11936/` whenever `HAPROXY_PASSWORD` is set —
+A real-time dashboard is available at `http://<host>:11936/` (set `HAPROXY_PASSWORD` to require a login) —
 no extra containers, no Prometheus, no Grafana. See the [dashboard guide](docs/guides/dashboard.md).
 
 ## See EasyHAProxy in action

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/README.md

@@ -66,7 +66,7 @@ EasyHAProxy is part of some projects:
 
 [![HAProxy Monitor](docs/dashboard_thumbnail.png)](docs/guides/dashboard.md)
 
-A real-time dashboard is available at `http://<host>:11936/` whenever `HAPROXY_PASSWORD` is set —
+A real-time dashboard is available at `http://<host>:11936/` (set `HAPROXY_PASSWORD` to require a login) —
 no extra containers, no Prometheus, no Grafana. See the [dashboard guide](docs/guides/dashboard.md).
 
 ## See EasyHAProxy in action

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/RELEASE.md

@@ -54,7 +54,7 @@ EasyHAProxy follows [Semantic Versioning](https://semver.org/):
   - **MINOR**: New features, plugin additions, backward-compatible changes
   - **PATCH**: Bug fixes, documentation updates, minor improvements
 
-**Current Version:** `6.2.0` (as of Chart.yaml)
+**Current Version:** `6.3.0` (as of Chart.yaml)
 
 ## Automated Release (Recommended)
 
@@ -329,6 +329,7 @@ helm show chart byjg/easyhaproxy
 
 | Version | Release Date | Type  | Highlights                                                                                                                            |
 |---------|--------------|-------|---------------------------------------------------------------------------------------------------------------------------------------|
+| 6.3.0   | 2026-10-21   | Minor | HAPROXY_STATS_ENABLE to turn stats/dashboard off, stats without a password documented with a startup warning, HAPROXY_STATS_PORT honored without a password, chart stats.enabled |
 | 6.2.0   | 2026-10-21   | Minor | Ingress status follows a cloud LoadBalancer address, EASYHAPROXY_SERVICE_NAME, Helm chart LoadBalancer Service and certbot persistence |
 | 6.1.1   | 2026-06-25   | Patch | Add pass_headers support to FastCGI plugin, fix flaky ACME e2e test timeout |
 | 6.1.0   | 2026-06-24   | Minor | FastCGI protocol support, certbot sidecar plugin, dependency updates |

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/deploy/docker/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   easyhaproxy:
-    image: byjg/easy-haproxy:6.2.0
+    image: byjg/easy-haproxy:6.3.0
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - certs_certbot:/etc/easyhaproxy/certs/certbot

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/deploy/kubernetes/easyhaproxy-clusterip.yml

@@ -6,10 +6,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 ---
 # Source: easyhaproxy/templates/clusterrole.yaml
@@ -19,10 +19,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
@@ -83,10 +83,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -105,10 +105,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
   annotations:
     {}
@@ -140,10 +140,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
@@ -164,7 +164,7 @@ spec:
         - name: easyhaproxy
           securityContext:
             {}
-          image: "byjg/easy-haproxy:6.2.0"
+          image: "byjg/easy-haproxy:6.3.0"
           imagePullPolicy: Always
           ports:
             - name: http
@@ -217,10 +217,10 @@ kind: IngressClass
 metadata:
   name: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   controller: byjg.com/easyhaproxy

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/deploy/kubernetes/easyhaproxy-daemonset.yml

@@ -6,10 +6,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 ---
 # Source: easyhaproxy/templates/clusterrole.yaml
@@ -19,10 +19,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
@@ -83,10 +83,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -104,10 +104,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   selector:
@@ -136,7 +136,7 @@ spec:
         - name: easyhaproxy
           securityContext:
             {}
-          image: "byjg/easy-haproxy:6.2.0"
+          image: "byjg/easy-haproxy:6.3.0"
           imagePullPolicy: Always
           ports:
             - name: http
@@ -189,10 +189,10 @@ kind: IngressClass
 metadata:
   name: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   controller: byjg.com/easyhaproxy

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/deploy/kubernetes/easyhaproxy-nodeport.yml

@@ -6,10 +6,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 ---
 # Source: easyhaproxy/templates/clusterrole.yaml
@@ -19,10 +19,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
@@ -83,10 +83,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -105,10 +105,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
   annotations:
     {}
@@ -140,10 +140,10 @@ metadata:
   name: ingress-easyhaproxy
   namespace: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
@@ -164,7 +164,7 @@ spec:
         - name: easyhaproxy
           securityContext:
             {}
-          image: "byjg/easy-haproxy:6.2.0"
+          image: "byjg/easy-haproxy:6.3.0"
           imagePullPolicy: Always
           ports:
             - name: http
@@ -217,10 +217,10 @@ kind: IngressClass
 metadata:
   name: easyhaproxy
   labels:
-    helm.sh/chart: easyhaproxy-2.0.5
+    helm.sh/chart: easyhaproxy-2.0.6
     app.kubernetes.io/name: easyhaproxy
     app.kubernetes.io/instance: ingress
-    app.kubernetes.io/version: "6.2.0"
+    app.kubernetes.io/version: "6.3.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   controller: byjg.com/easyhaproxy

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/getting-started/kubernetes.md

@@ -41,7 +41,7 @@ Exposes HAProxy on NodePort `31080` (HTTP), `31443` (HTTPS), and `31936` (stats)
 
 ```bash
 kubectl apply -f \
-    https://raw.githubusercontent.com/byjg/docker-easy-haproxy/6.2.0/deploy/kubernetes/easyhaproxy-nodeport.yml
+    https://raw.githubusercontent.com/byjg/docker-easy-haproxy/6.3.0/deploy/kubernetes/easyhaproxy-nodeport.yml
 ```
 
 ### ClusterIP (behind a LoadBalancer)
@@ -50,7 +50,7 @@ Cluster-internal only. Pair with an external cloud LoadBalancer or `kubectl port
 
 ```bash
 kubectl apply -f \
-    https://raw.githubusercontent.com/byjg/docker-easy-haproxy/6.2.0/deploy/kubernetes/easyhaproxy-clusterip.yml
+    https://raw.githubusercontent.com/byjg/docker-easy-haproxy/6.3.0/deploy/kubernetes/easyhaproxy-clusterip.yml
 ```
 
 ### DaemonSet (special cases — requires node label)
@@ -64,7 +64,7 @@ The node label must be reapplied after any node replacement. Failing to do so wi
 kubectl label nodes node-01 "easyhaproxy/node=master"
 
 kubectl apply -f \
-    https://raw.githubusercontent.com/byjg/docker-easy-haproxy/6.2.0/deploy/kubernetes/easyhaproxy-daemonset.yml
+    https://raw.githubusercontent.com/byjg/docker-easy-haproxy/6.3.0/deploy/kubernetes/easyhaproxy-daemonset.yml
 ```
 
 If you need to configure environment variables (log levels, stats password, etc.), see the [environment variable reference](../reference/environment-variables.md).

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/getting-started/static.md

@@ -50,6 +50,7 @@ curl http://myapp.example.com
 
 ```yaml
 stats:
+  enabled: true       # Optional (default true); false turns stats and the dashboard off
   username: admin     # Optional (default "admin")
   password: password  # If omitted, stats are public with no password
   port: 1936          # Optional (default 1936)

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/getting-started/swarm.md

@@ -28,7 +28,7 @@ docker network create -d overlay --attachable easyhaproxy
 ```yaml
 services:
   haproxy:
-    image: byjg/easy-haproxy:6.2.0
+    image: byjg/easy-haproxy:6.3.0
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     deploy:

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/guides/acme.md

@@ -157,7 +157,7 @@ Here's a complete `docker-compose.yml` showing proper ACME configuration:
 ```yaml
 services:
   easyhaproxy:
-    image: byjg/easy-haproxy:6.2.0
+    image: byjg/easy-haproxy:6.3.0
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       # REQUIRED: Persist Certbot certificates (ACME)

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/guides/dashboard.md

@@ -13,11 +13,11 @@ single page, with no extra software required.
 
 ## Enabling the dashboard
 
-Two environment variables are required:
+The dashboard is on by default (`HAPROXY_STATS_ENABLE=true`). Set these two variables:
 
 | Variable                    | Purpose                                                                                                                                       |
 |-----------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------|
-| `HAPROXY_PASSWORD`          | Enables the stats endpoint and the dashboard.                                                                                                 |
+| `HAPROXY_PASSWORD`          | Requires a login for the stats endpoint and the dashboard. **Without it, both are served without a login.**                                   |
 | `HAPROXY_STATS_CORS_ORIGIN` | Allows the dashboard page to call the stats API. **Required** — without it the browser blocks the requests and the dashboard shows no data.   |
 
 The dashboard page is served from port `HAPROXY_STATS_PORT + 10000`, but it fetches data from
@@ -133,7 +133,8 @@ EasyHAProxy bundles a polished, self-contained dashboard that:
 
 | Variable | Description | Default |
 |---|---|---|
-| `HAPROXY_PASSWORD` | Enables stats **and** the dashboard. Required. | *empty* |
+| `HAPROXY_STATS_ENABLE` | Serve stats **and** the dashboard. `false` turns both off. | `true` |
+| `HAPROXY_PASSWORD` | Login password for stats and the dashboard. Without it they are served without a login. | *empty* |
 | `HAPROXY_USERNAME` | Username for the stats endpoint. | `admin` |
 | `HAPROXY_STATS_PORT` | Stats API port. Dashboard is served on this port **+ 10000**. | `1936` |
 | `HAPROXY_STATS_CORS_ORIGIN` | **Required for the dashboard.** Set to the exact origin you use to open the dashboard (e.g. `http://localhost:11936`). Without this the browser blocks stats API calls and the dashboard shows no data. | *empty* |

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/guides/ssl.md

@@ -83,7 +83,7 @@ docker cp single.pem easyhaproxy:/etc/easyhaproxy/certs/haproxy/example.com.pem
 ```yaml
 services:
   easyhaproxy:
-    image: byjg/easy-haproxy:6.2.0
+    image: byjg/easy-haproxy:6.3.0
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - certs_haproxy:/etc/easyhaproxy/certs/haproxy

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/reference/cli.md

@@ -38,13 +38,14 @@ Valid levels: `TRACE`, `DEBUG`, `INFO`, `WARN`, `ERROR`, `FATAL`
 
 | Flag                                 | Environment Variable        | Default      | Description                                 |
 |--------------------------------------|-----------------------------|--------------|---------------------------------------------|
-| `--haproxy-password PASSWORD`        | `HAPROXY_PASSWORD`          | *(disabled)* | Enable stats dashboard with this password   |
+| `--haproxy-stats-enable BOOL`        | `HAPROXY_STATS_ENABLE`      | `true`       | Serve the stats and dashboard               |
+| `--haproxy-password PASSWORD`        | `HAPROXY_PASSWORD`          | *(none)*     | Require this password for stats and dashboard |
 | `--haproxy-username USERNAME`        | `HAPROXY_USERNAME`          | `admin`      | Stats dashboard username                    |
 | `--haproxy-stats-port PORT`          | `HAPROXY_STATS_PORT`        | `1936`       | Stats dashboard port                        |
 | `--haproxy-stats-cors-origin ORIGIN` | `HAPROXY_STATS_CORS_ORIGIN` | *(none)*     | Allowed CORS origin for the stats dashboard |
 
 :::tip
-The stats dashboard is only enabled when `--haproxy-password` (or `HAPROXY_PASSWORD`) is set.
+Stats and the dashboard are on by default. Without `--haproxy-password` (or `HAPROXY_PASSWORD`) they are served without a login; turn them off with `--haproxy-stats-enable false`.
 :::
 
 ## ACME / Certbot (SSL certificates)

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/reference/environment-variables.md

@@ -16,15 +16,17 @@ sidebar_label: "Environment Variables"
 | EASYHAPROXY_LOG_LEVEL     | (Optional) The log level for EasyHAproxy messages. Available: TRACE,DEBUG,INFO,WARN,ERROR,FATAL                                                                                                | DEBUG              |
 | CERTBOT_LOG_LEVEL         | (Optional) The log level for Certbot messages. Available: TRACE,DEBUG,INFO,WARN,ERROR,FATAL                                                                                                    | DEBUG              |
 | HAPROXY_LOG_LEVEL         | (Optional) The log level for HAProxy messages. Available: TRACE,DEBUG,INFO,WARN,ERROR,FATAL                                                                                                    | INFO               |
+| HAPROXY_STATS_ENABLE      | (Optional) Serve the statistics endpoint and the monitoring dashboard. Set to `false` to turn them off.                                                                                       | `true`             |
 | HAPROXY_USERNAME          | (Optional) The HAProxy username for the statistics endpoint (used only when `HAPROXY_PASSWORD` is set).                                                                                        | `admin`            |
-| HAPROXY_PASSWORD          | (Optional) The HAProxy password to the statistics endpoint. Stats are **disabled** unless this is defined.                                                                                     | *empty*            |
-| HAPROXY_STATS_PORT        | (Optional) The HAProxy port to the statistics. If set to `false`, disable statistics. Only applies when `HAPROXY_PASSWORD` is defined.                                                         | `1936`             |
-| HAPROXY_STATS_CORS_ORIGIN | Required for the monitoring dashboard to function. Set to the origin you use to open the dashboard (e.g. `http://localhost:11936`). The dashboard page calls the stats API from a different port, so the browser enforces CORS — without this header the dashboard shows no data. Only applies when `HAPROXY_PASSWORD` is defined. | *empty*            |
+| HAPROXY_PASSWORD          | (Optional) The password for the statistics endpoint and dashboard. **Without it they are served without a login.**                                                                                     | *empty*            |
+| HAPROXY_STATS_PORT        | (Optional) The HAProxy port to the statistics. The dashboard uses this port + 10000. `false` also turns statistics off.                                                         | `1936`             |
+| HAPROXY_STATS_CORS_ORIGIN | Required for the monitoring dashboard to function. Set to the origin you use to open the dashboard (e.g. `http://localhost:11936`). The dashboard page calls the stats API from a different port, so the browser enforces CORS — without this header the dashboard shows no data. | *empty*            |
 | HAPROXY_CUSTOMERRORS      | (Optional) If HAProxy will use custom HTML errors. true/false.                                                                                                                                 | `false`            |
 
 :::tip HAProxy Stats & Dashboard
-Statistics are only configured when `HAPROXY_PASSWORD` is set. Without a password, neither the
-stats endpoint nor the monitoring dashboard is generated.
+Statistics and the monitoring dashboard are on by default. Without `HAPROXY_PASSWORD` they are served
+**without a login**, and EasyHAProxy logs a warning at startup. Set a password, or `HAPROXY_STATS_ENABLE=false`
+when the ports can be reached from outside.
 When enabled, the real-time dashboard is available at `http://<host>:<HAPROXY_STATS_PORT + 10000>/`
 (default `http://<host>:11936/`). See the [Monitoring Dashboard guide](../guides/dashboard.md) for details.
 :::

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/reference/helm.md

@@ -48,7 +48,8 @@ Set `service.create: true` and `service.type: NodePort` for most setups. DaemonS
 | Value                              | Description                                         | Default    |
 |------------------------------------|-----------------------------------------------------|------------|
 | `easyhaproxy.stats.username`       | HAProxy stats username                                                              | `admin`    |
-| `easyhaproxy.stats.password`       | HAProxy stats password. **Required** to enable the stats endpoint and dashboard.   | `password` |
+| `easyhaproxy.stats.enabled`        | Serve the stats endpoint and dashboard. `false` also removes ports 1936/11936 from the pod and Service. | `true`     |
+| `easyhaproxy.stats.password`       | Login password for the stats endpoint and dashboard. Empty serves them without a login. | `password` |
 | `easyhaproxy.stats.corsOrigin`     | Allowed origin for stats API CORS (e.g. `http://node01:11936`). **Required** for the dashboard to load in a browser. | `""`       |
 | `easyhaproxy.refresh`              | Seconds between service discovery polls             | `"10"`     |
 | `easyhaproxy.customErrors`         | Enable custom HTML error pages                      | `"true"`   |

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/docs/reference/other.md

@@ -30,7 +30,7 @@ These headers help backend applications:
 Some ports on the EasyHAProxy container and in the firewall are required to be open. However, you don't need to expose the other container ports because EasyHAProxy will handle that.
 
 - The ports `80` and `443`.
-- If you enable the HAProxy statistics, you must also expose the port defined in `HAPROXY_STATS_PORT` environment variable (default 1936). Statistics are only generated when you set `HAPROXY_PASSWORD`.
+- If you enable the HAProxy statistics, you must also expose the port defined in `HAPROXY_STATS_PORT` environment variable (default 1936). Statistics are on by default (`HAPROXY_STATS_ENABLE=false` turns them off) and need `HAPROXY_PASSWORD` to require a login.
 - Every port defined in `easyhaproxy.[definitions].port` also should be exposed.
 
 For example:

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/helm/easyhaproxy/Chart.yaml

@@ -15,12 +15,12 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 2.0.5
+version: 2.0.6
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "6.2.0"
+appVersion: "6.3.0"
 
 icon: https://opensource.byjg.com/img/easy_haproxy_logo.png

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/helm/easyhaproxy/README.md

@@ -50,6 +50,7 @@ binding:
 
 easyhaproxy:
   stats:
+    enabled: true
     username: admin
     password: password
   refresh: "10"

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/helm/easyhaproxy/templates/_helpers.tpl

@@ -60,3 +60,10 @@ Create the name of the service account to use
 {{- default "default" .Values.serviceAccount.name }}
 {{- end }}
 {{- end }}
+
+{{/*
+"true" when the stats page and dashboard are served. Missing from older values means enabled.
+*/}}
+{{- define "easyhaproxy.statsEnabled" -}}
+{{- if dig "enabled" true .Values.easyhaproxy.stats }}true{{ end }}
+{{- end }}

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/helm/easyhaproxy/templates/deployment.yaml

@@ -64,12 +64,14 @@ spec:
             - name: https
               containerPort: 443
               {{ if not .Values.service.create }}hostPort: {{ .Values.binding.ports.https }}{{ end }}
+            {{- if include "easyhaproxy.statsEnabled" . }}
             - name: stats
               containerPort: 1936
               {{ if not .Values.service.create }}hostPort: {{ .Values.binding.ports.stats }}{{ end }}
             - name: dashboard
               containerPort: 11936
               {{ if not .Values.service.create }}hostPort: {{ .Values.binding.ports.dashboard }}{{ end }}
+            {{- end }}
             {{- range $port := .Values.binding.additionalPorts }}
             - name: extra{{ $port }}
               containerPort: {{ $port }}
@@ -80,10 +82,12 @@ spec:
           env:
             - name: EASYHAPROXY_DISCOVER
               value: kubernetes
+            - name: HAPROXY_STATS_ENABLE
+              value: {{ include "easyhaproxy.statsEnabled" . | default "false" | quote }}
             - name: HAPROXY_USERNAME
               value: {{ .Values.easyhaproxy.stats.username }}
             - name: HAPROXY_PASSWORD
-              value: {{ .Values.easyhaproxy.stats.password }}
+              value: {{ .Values.easyhaproxy.stats.password | quote }}
             {{- if .Values.easyhaproxy.stats.corsOrigin }}
             - name: HAPROXY_STATS_CORS_ORIGIN
               value: {{ .Values.easyhaproxy.stats.corsOrigin | quote }}

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/helm/easyhaproxy/templates/service.yaml

@@ -18,12 +18,14 @@ spec:
     - name: https
       port: 443
       {{ if eq .Values.service.type "NodePort" }}nodePort: {{ .Values.binding.ports.https }}{{ end }}
+    {{- if include "easyhaproxy.statsEnabled" . }}
     - name: stats
       port: 1936
       {{ if eq .Values.service.type "NodePort" }}nodePort: {{ .Values.binding.ports.stats }}{{ end }}
     - name: dashboard
       port: 11936
       {{ if eq .Values.service.type "NodePort" }}nodePort: {{ .Values.binding.ports.dashboard }}{{ end }}
+    {{- end }}
     {{- range $port := .Values.binding.additionalPorts }}
     - name: extra{{ $port }}
       port: {{ $port }}

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/helm/easyhaproxy/values.yaml

@@ -79,6 +79,7 @@ affinity: {}
 
 easyhaproxy:
   stats:
+    enabled: true        # false: no stats page or dashboard, and ports 1936/11936 are not exposed
     username: admin
     password: password
     corsOrigin: ""

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "easyhaproxy"
-version = "6.2.0"
+version = "6.3.0"
 description = "HAProxy label based routing with service discovery for Docker, Swarm, and Kubernetes"
 readme = "README.md"
 license = {file = "LICENSE"}

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/src/easyhaproxy/main.py

@@ -10,6 +10,7 @@ from deepdiff import DeepDiff
 from functions import (
     Certbot,
     Consts,
+    ContainerEnv,
     DaemonizeHAProxy,
     Functions,
     logger_easyhaproxy,
@@ -84,8 +85,11 @@ def _build_parser() -> argparse.ArgumentParser:
                         help="Certbot log level. Also set by CERTBOT_LOG_LEVEL.")
 
     # Stats
+    parser.add_argument("--haproxy-stats-enable", metavar="BOOL",
+                        choices=["true", "false"],
+                        help="Serve the HAProxy stats and dashboard. Also set by HAPROXY_STATS_ENABLE.")
     parser.add_argument("--haproxy-password", metavar="PASSWORD",
-                        help="Enable HAProxy stats dashboard with this password. Also set by HAPROXY_PASSWORD.")
+                        help="Password for the HAProxy stats and dashboard. Also set by HAPROXY_PASSWORD.")
     parser.add_argument("--haproxy-username", metavar="USERNAME",
                         help="HAProxy stats dashboard username. Also set by HAPROXY_USERNAME.")
     parser.add_argument("--haproxy-stats-port", metavar="PORT",
@@ -149,6 +153,7 @@ def _apply_args_to_env(args: argparse.Namespace) -> None:
         "log_level":                       "EASYHAPROXY_LOG_LEVEL",
         "haproxy_log_level":               "HAPROXY_LOG_LEVEL",
         "certbot_log_level":               "CERTBOT_LOG_LEVEL",
+        "haproxy_stats_enable":            "HAPROXY_STATS_ENABLE",
         "haproxy_password":                "HAPROXY_PASSWORD",
         "haproxy_username":                "HAPROXY_USERNAME",
         "haproxy_stats_port":              "HAPROXY_STATS_PORT",
@@ -185,6 +190,12 @@ def start():
 
     start_dashboard_server()
 
+    stats = ContainerEnv.read()["stats"]
+    if stats["enabled"] and not stats["password"]:
+        logger_easyhaproxy.warning(
+            f"HAProxy stats and dashboard are served WITHOUT a login on port {stats['port']}. "
+            "Set HAPROXY_PASSWORD to require one, or HAPROXY_STATS_ENABLE=false to turn them off.")
+
     processor_obj.save_config(Consts.haproxy_config)
     processor_obj.save_certs(Consts.certs_haproxy)
     certbot_certs_found = processor_obj.get_certbot_hosts()

{easyhaproxy-6.2.0 → easyhaproxy-6.3.0}/src/functions/container_env.py

@@ -27,13 +27,14 @@ class ContainerEnv:
             "ssl_mode": os.getenv("EASYHAPROXY_SSL_MODE").lower() if os.getenv("EASYHAPROXY_SSL_MODE") else 'default'
         }
 
-        if os.getenv("HAPROXY_PASSWORD"):
-            env_vars["stats"] = {
-                "username": os.getenv("HAPROXY_USERNAME") if os.getenv("HAPROXY_USERNAME") else "admin",
-                "password": os.getenv("HAPROXY_PASSWORD"),
-                "port": os.getenv("HAPROXY_STATS_PORT") if os.getenv("HAPROXY_STATS_PORT") else "1936",
-                "cors_origin": os.getenv("HAPROXY_STATS_CORS_ORIGIN", ""),
-            }
+        # Stats are on unless disabled; without a password they are served without a login
+        env_vars["stats"] = {
+            "enabled": os.getenv("HAPROXY_STATS_ENABLE", "true").lower() != "false",
+            "username": os.getenv("HAPROXY_USERNAME") if os.getenv("HAPROXY_USERNAME") else "admin",
+            "password": os.getenv("HAPROXY_PASSWORD", ""),
+            "port": os.getenv("HAPROXY_STATS_PORT") if os.getenv("HAPROXY_STATS_PORT") else "1936",
+            "cors_origin": os.getenv("HAPROXY_STATS_CORS_ORIGIN", ""),
+        }
 
         env_vars["lookup_label"] = os.getenv("EASYHAPROXY_LABEL_PREFIX") if os.getenv(
             "EASYHAPROXY_LABEL_PREFIX") else "easyhaproxy"
@@ -138,6 +139,8 @@ class ContainerEnv:
         # Convert stats
         if 'stats' in yaml_config:
             stats = yaml_config['stats']
+            if 'enabled' in stats:
+                os.environ['HAPROXY_STATS_ENABLE'] = str(stats['enabled']).lower()
             if 'username' in stats:
                 os.environ['HAPROXY_USERNAME'] = str(stats['username'])
             if 'password' in stats: