haproxy.cfg for docker registry:"2

haproxy.cfg

global
    daemon
    maxconn 256
    user        haproxy
    group       haproxy
    chroot      /var/lib/haproxy
    ssl-default-bind-options no-sslv3 no-tlsv10
    ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
    ssl-default-server-options no-sslv3 no-tlsv10
    ssl-default-server-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
    tune.ssl.default-dh-param 2048

defaults
    mode http

frontend http
    bind *:80
    bind *:443 ssl crt /etc/haproxy/your.crt.and.privkey.pem
    acl is_registry hdr(Host) -i registry.yourdomain.com
    http-request set-header X-Forwarded-Proto https
    use_backend servers if is_registry

backend servers
    redirect scheme https if !{ ssl_fc }
    server server 127.0.0.1:5000