gistfile1.txt

frontend http-in
    bind :80 name http
    mode http
    reqadd X-Forwarded-Proto:\ http
    use_backend bk_letsencrypt if { hdr(host) -i host.domain.tld } { path_beg -i /.well-known/acme-challenge }
    redirect scheme https code 301 if !{ ssl_fc }