.

jails/config/git/gitea-restart.sh

@@ -0,0 +1,20 @@
+#!/usr/local/bin/bash
+
+# Copyright (c) 2018-2021, diyIT.org
+# All rights reserved.
+#
+# BSD 2-Clause License ("Simplified BSD License" or "FreeBSD License")
+# https://diyit.org/license/
+#
+#
+
+Q=`netstat -LAan | grep 3000 | cut -f3 -d" " | cut -f1 -d/`
+# Q is null if gitea service is not running
+
+if [ ! "$Q" ] || [ $Q -ne 0 ]; then
+    echo "restarting gitea stuck at $Q"
+    tail /var/log/gitea/gitea.log
+    kill -9 `pgrep gitea` ; sleep 2 ; service gitea start
+fi
+
+# crontab - 5 * * * * /mnt/config/gitea-restart.sh

jails/config/proxy/haproxy.conf

@@ -188,7 +188,8 @@ backend bk_ahlawat-cloud
   http-response add-header X-Frame-Options: SAMEORIGIN
 
 backend bk_ahlawat-git
-  server srv1 gitx.ahlawat.com:3000 check ssl ca-file /mnt/certs/cacert.pem alpn h2
+  timeout queue 8s
+  server srv1 gitx.ahlawat.com:3000 check ssl maxconn 32 ca-file /mnt/certs/cacert.pem alpn h2
   server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2
   http-response set-header X-Frame-Options "ALLOW-FROM *.diyit.org"
 #  http-response add-header X-Frame-Options: SAMEORIGIN

jails/config/vpngw/ipfw.rules

@@ -18,7 +18,7 @@
 # Set rules command prefix
 cmd="ipfw -q add"
 lif="epair0b" # interface name of VNET attached to Local network
-rif="tun1" # interface name of Tunnel attached to Remote network
+rif="tun0" # interface name of Tunnel attached to Remote network
 skip="skipto 12000"
 
 # Flush out the list before we begin.