# Automaticaly generated, dont edit manually. # Generated on: 2020-01-20 23:16 global maxconn 1000 stats socket /tmp/haproxy.socket level admin expose-fd listeners uid 80 gid 80 nbproc 1 nbthread 1 hard-stop-after 15m chroot /tmp/haproxy_chroot daemon tune.ssl.default-dh-param 2048 log-send-hostname url.com-HA server-state-file /tmp/haproxy_server_state listen HAProxyLocalStats bind 127.0.0.1:2200 name localstats mode http stats enable stats admin if TRUE stats show-legends stats uri /haproxy/haproxy_stats.php?haproxystats=1 timeout client 5000 timeout connect 5000 timeout server 5000 frontend shared-frontend-WAN-and-LAN-merged bind 69.xxx.xxx.xxx:443 name 69.xxx.xxx.xxx:443 ssl crt-list /var/etc/haproxy/shared-frontend-WAN-and-LAN.crt_list bind 10.0.1.1:443 name 10.0.1.1:443 ssl crt-list /var/etc/haproxy/shared-frontend-WAN-and-LAN.crt_list mode http log global option http-keep-alive option forwardfor acl https ssl_fc http-request set-header X-Forwarded-Proto http if !https http-request set-header X-Forwarded-Proto https if https timeout client 30000 acl ACL1 var(txn.txnhost) -m str -i url.com acl ACL2 var(txn.txnhost) -m str -i www.url.com http-request set-var(txn.txnhost) hdr(host) use_backend url.com_ipvANY if ACL1 use_backend url.com_ipvANY if ACL2 frontend http-to-https-WAN bind 69.xxx.xxx.xxx:80 name 69.xxx.xxx.xxx:80 mode http log global option http-keep-alive timeout client 30000 redirect scheme https code 301 if !{ ssl_fc } backend url.com_ipvANY mode http id 102 log global option log-health-checks timeout connect 30000 timeout server 30000 retries 3 option httpchk OPTIONS / server url.com 10.0.1.158:80 id 103 check inter 100