haproxy-ssl.yaml

haproxy:
  ssl_key: |
    ------- BASE64 ENCODED PRIVATE SSL KEY ----
    ...
    --------------- END KEY -------------------
  ssl_cert: |
    ---- BASE 64 ENCODED PRIVATE SSL CERT -----
    ...
    ----------------- END CERT ----------------

  services: |
    - service_name: haproxy_service
      service_host: "0.0.0.0"
      service_port: 80
      service_options:
        - 'redirect scheme https code 301 if !{ ssl_fc }'
      server_options: maxconn 100 cookie S{i} check
    - service_name: haproxy_service2
      service_host: "0.0.0.0"
      service_port: 443
      crts: [DEFAULT]
      service_options:
        - "balance leastconn"
        - "acl foo dst_port 443"
        - "use_backend haproxy_service if foo"
        - "option httpchk HEAD / HTTP/1.0"
        - "http-request set-header X-Forwarded-Proto https"
      server_options: maxconn 100 cookie S{i} check