Generate self-signed certificate for HAProxy

gistfile1.txt

# Generate a unique private key (KEY)
sudo openssl genrsa -out xxx.local.key 2048

# Generating a Certificate Signing Request (CSR)
sudo openssl req -new -key xxx.local.key -out xxx.local.csr

# Creating a Self-Signed Certificate (CRT)
sudo openssl x509 -req -days 365 -in xxx.local.csr -signkey mydomain.key -out xxx.local.crt

# Append KEY and CRT to xxx.local.pem
sudo bash -c 'cat xxx.local.key xxx.local.crt >> /etc/ssl/private/xxx.local.pem'

# Specify PEM in haproxy config
sudo vim /etc/haproxy/haproxy.cfg
frontend https-in
	bind *:443 ssl crt /etc/ssl/private/xxx.local.pem
    acl host_flair hdr(host) -i xxx.local

    use_backend flair if host_flair