global
    daemon
    chroot      /var/lib/haproxy
    pidfile     /var/run/haproxy.pid
    stats socket /var/lib/haproxy/stats level admin
    maxconn     4096
    tune.ssl.default-dh-param 2048


defaults
    log                     global
    option                  dontlognull
    option                  redispatch
    retries                 3
    timeout http-request    5s
    timeout queue           1m
    timeout connect         5s
    timeout client          5s
    timeout server          10s
    timeout http-keep-alive 10s
    timeout check           10s
    maxconn                 2000

listen stats
    bind 127.0.0.1:9090
    balance
    mode http
    stats enable
    stats auth vagrant:vagrant

frontend web
    bind *:80
    mode http
    use_backend web

backend web
    balance roundrobin
    mode http
    option forwardfor
    http-request set-header X-Forwarded-Port %[dst_port]
    http-request set-header X-Forwarded-Port https if { ssl_fc }
    server web01 192.168.33.10:80
    server web02 192.168.33.11:80