global
   log /dev/log local0
   log /dev/log local1 notice
   chroot /var/lib/haproxy
   maxconn 2048
   stats timeout 30s
   user haproxy
   group haproxy
   daemon

defaults
   log global
   mode http
   option httplog
   option dontlognull
   option forwardfor
#  option http-server-close
   timeout connect 5000
   timeout client 5000
   timeout server 5000

listen stats
   bind *:8181
   stats enable
   stats uri /
   stats realm Haproxy\ Statistics
   stats auth username:password
   stats uri /haproxy?stats

frontend http_home
   bind 10.20.1.15:80
   bind *:443 ssl crt-list /etc/ssl/crt-list.txt
   redirect scheme https code 301 if !{ ssl_fc }
   http-response set-header Strict-Transport-Security max-age=31536000;\ includeSubdomains;\ preload
   use_backend http_backend if { hdr(host) -i privetdrive.net }
   use_backend http_backend if { hdr_beg(host) -i www.privetdrive.net }
   use_backend unifi_backend if { hdr_beg(host) -i unifi.privetdrive.net }
   use_backend unms_backend if { hdr_beg(host) -i unms.privetdrive.net }
   use_backend quake_backend if { hdr_beg(host) -i quake.privetdrive.net }
   use_backend http_backend if { hdr_dom(host) -i sundsvallbbq.se }
   use_backend letsencrypt-backend if { path_beg /.well-known/acme-challenge/ }
   default_backend http_backend

backend unifi_backend
   server unifi 10.20.1.11:8080 check

backend unms_backend
   server unms 10.20.1.12:80 check

backend quake_backend
   server q3a 10.20.1.5:27960 check

backend letsencrypt-backend
   server letsencrypt 127.0.0.1:8888

backend http_backend
 server webserver 10.20.1.25:80 check