HAProxy configuration for forwarding to Puppet webhook

haproxy.pp

class { 'haproxy':
  global_options   => {
    'log'     => "${::ipaddress} local2",
    'chroot'  => '/var/lib/haproxy',
    'pidfile' => '/var/run/haproxy.pid',
    'maxconn' => 5000,
    'user'    => 'haproxy',
    'group'   => 'haproxy',
    'daemon'  => '',
    'stats'   => 'socket /var/lib/haproxy/stats',
  },
  defaults_options => {
    'timeout' => [
      'connect 10s',
      'queue 1m',
      'client 2m',
      'server 2m',
      'http-request 120s',
    ]
  }
}

haproxy::listen { 'code-manager-webhook':
  mode             => 'http',
  collect_exported => false,
  bind             => {
    "${::ipaddress}:9170" => ['ssl', 'crt', '/tmp/letsencrypt.key.crt.pem'], # concatenated private key and cert
  },
}

haproxy::balancermember { 'localhost':
  listening_service => 'code-manager-webhook',
  server_names      => 'localhost',
  ipaddresses       => '127.0.0.1',
  ports             => '8170',
  options           => 'ssl verify none',
}