# Envoy listeners (LDS)
#
# Applied live within 5s of saving. An invalid file is rejected and the last
# good configuration stays active; check: journalctl -u envoy
#
# Clusters referenced by routes must exist in cds.yaml.

resources:
- "@type": type.googleapis.com/envoy.config.listener.v3.Listener
  name: http
  address:
    socket_address: { address: 127.0.0.1, port_value: 10000 }
  filter_chains:
  - filters:
    - name: envoy.filters.network.http_connection_manager
      typed_config:
        "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
        stat_prefix: http
        # Behind angie/nginx: client address is the last X-Forwarded-For entry
        use_remote_address: true
        xff_num_trusted_hops: 1
        upgrade_configs:
        - upgrade_type: websocket
        access_log:
        - name: envoy.access_loggers.stdout
          typed_config:
            "@type": type.googleapis.com/envoy.extensions.access_loggers.stream.v3.StdoutAccessLog
        route_config:
          name: local
          virtual_hosts:
          # - name: app
          #   domains: ["app.example.com"]
          #   routes:
          #   - match: { prefix: "/" }
          #     route: { cluster: app }
          - name: default
            domains: ["*"]
            routes:
            - match: { prefix: "/" }
              direct_response: { status: 404 }
        http_filters:
        - name: envoy.filters.http.router
          typed_config:
            "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router