Add pulfalight prod.

roles/nginxplus/files/conf/http/pulfalight-prod.conf

@@ -4,12 +4,20 @@ proxy_cache_path /var/cache/nginx/pulfalight-prod/ keys_zone=pulfalight-prodcach
 upstream pulfalight-prod {
     least_time last_byte inflight;
     zone pulfalight-prod 64k;
-    server pulfalight-jammy-prod1.princeton.edu resolve max_fails=0;
-    server pulfalight-jammy-prod2.princeton.edu resolve max_fails=3;
+    # lowchallenge challenges after 20 requests from xx.xx.<>.<>.<>
+    server service.consul service=lowchallenge.traefik-wall-staging resolve max_fails=0;
+    # highchallenge challenges everyone. Comment above and uncomment
+    # this when you're being swarmed by bots.
+    # server service.consul service=highchallenge.traefik-wall-staging resolve max_fails=0;
+    # If Traefik crashes, fall down to the box directly.
+    server pulfalight-jammy-prod1.princeton.edu resolve max_fails=0 backup;
+    server pulfalight-jammy-prod2.princeton.edu resolve max_fails=3 backup;
     sticky learn
           create=$upstream_cookie_pulfalightprodcookie
           lookup=$cookie_pulfalightprodcookie
           zone=pulfalightprodclient_sessions:1m;
+    resolver nomad-host-prod1.lib.princeton.edu nomad-host-prod2.lib.princeton.edu nomad-host-prod3.lib.princeton.edu valid=5s;
+    resolver_timeout 2s;
 }
 
 server {