#
# Automatically generated configuration.
# Do not edit this file manually.







global
    # NOTE: Could be a security issue, but required for some feature.
    uid                         80
    gid                         80
    chroot                      /var/haproxy
    daemon
    stats                       socket /var/run/haproxy.socket level admin
    nbproc                      1
    nbthread                    1
    tune.ssl.default-dh-param   1024
    spread-checks               0
    tune.chksize                16384
    tune.bufsize                16384
    tune.lua.maxmem             0
    log /var/run/log local0 info


defaults
    log     global
    option redispatch -1
    timeout client 30s
    timeout connect 30s
    timeout server 30s
    retries 3


# autogenerated entries for ACLs

# autogenerated entries for config in backends/frontends
userlist list_5bffb103af1398.39436309
    # Origin: Backend_lxmonitor_prometheus
    user simonszu insecure-password c8d6d34qcxy
    # WARNING: UserlistAddUsers called with empty group data


# autogenerated entries for stats


# Frontend: Frontend_HTTPS (Web Service Frontend)
frontend Frontend_HTTPS
    bind 148.251.84.126:443 name 148.251.84.126:443 ssl  crt-list /tmp/haproxy/ssl/5bff9e37369278.51072792.certlist
    mode http
    option http-keep-alive
    # tuning options
    timeout client 30s

   # logging options
    # ACL: Condition_lxweb_web
    acl acl_5bff9cda750e32.87453973 hdr_reg(host) -i ^(?!(matrix)|(znc)|(prometheus)).*simonszu.de$
    # ACTION: Rule_lxweb_web
    use_backend Backend_lxweb_web if acl_5bff9cda750e32.87453973
    # ACL: Condition_lxmonitor_prometheus
    acl acl_5bffb1540369c5.32960733 hdr(host) -i prometheus.simonszu.de
    # ACTION: Rule_lxmonitor_prometheus
    use_backend Backend_lxmonitor_prometheus if acl_5bffb1540369c5.32960733
    # ACL: Condition_lxchat_znc
    acl acl_5bffb2a280bb17.94966369 hdr(host) -i znc.simonszu.de
    # ACTION: Rule_lxchat_znc_web
    use_backend Backend_lxchat_znc_web if acl_5bffb2a280bb17.94966369

# Frontend: Frontend_HTTP (Web Service Frontend)
frontend Frontend_HTTP
    bind 148.251.84.126:80 name 148.251.84.126:80
    mode http
    option http-keep-alive
    # tuning options
    timeout client 30s

    # logging options
    # ACL: Condition_NoSSL
    acl acl_5bffa2835dcdc1.20921727 ssl_fc
    # ACTION: Rule_HTTPS_redirect
    http-request redirect scheme https code 301 if !acl_5bffa2835dcdc1.20921727

# Frontend: Frontend_git_SSH (git SSH Frontend)
frontend Frontend_git_SSH
    bind 148.251.84.126:222 name 148.251.84.126:222
    mode tcp
    # tuning options
    timeout client 30s

    # logging options
    # ACL: Condition_lxweb_git
    acl acl_5bffb45049af03.80139164 hdr_reg(host) -i .*
    # ACTION: Rule_lxweb_git
    use_backend Backend_lxweb_git if acl_5bffb45049af03.80139164

# Frontend: Frontend_mariadb ()
frontend Frontend_mariadb
    bind 148.251.84.126:3306 name 148.251.84.126:3306
    mode tcp
    # tuning options
    timeout client 30s

    # logging options
    # ACL: Condition_lxdb_mariadb
    acl acl_5bffbc082c6907.24994033 hdr_beg(host) -i mysql.simonszu.de
    # ACTION: Rule_lxdb_mariadb
    use_backend Backend_lxdb_mariadb if acl_5bffbc082c6907.24994033

# Backend: acme_challenge_backend (Added by Let's Encrypt plugin)
backend acme_challenge_backend
    # health checking is DISABLED
    mode http
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s
    timeout server 30s
    http-reuse never
    server acme_challenge_host 127.0.0.1:43580

# Backend: Backend_lxweb_web (Web Server Backend)
backend Backend_lxweb_web
    # health check: Health_TCP
    mode http
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s
    timeout server 30s
    http-reuse never
    server lxweb_web 10.10.10.7:80 check inter 2s

# Backend: Backend_lxmonitor_prometheus (Web Server Backend)
backend Backend_lxmonitor_prometheus
    # health check: Health_TCP
    mode http
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s
    timeout server 30s
    acl auth_ok http_auth(list_5bffb103af1398.39436309)
    http-request auth if !auth_ok
    http-reuse never
    server lxmonitor_prometheus 10.10.10.13:9090 check inter 2s

# Backend: Backend_lxchat_znc_web (ZNC Web Frontend Backend)
backend Backend_lxchat_znc_web
    # health check: Health_TCP
    mode http
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s

    timeout server 30s
    http-reuse never
    server lxchat_znc_web 10.10.10.8:1337 check inter 2s

# Backend: Backend_lxweb_git (Gitea SSH)
backend Backend_lxweb_git
    # health check: Health_TCP
    mode tcp
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s
    timeout server 30s
    server lxweb_git 10.10.10.7:222 check inter 2s

# Backend: Backend_lxdb_mariadb (MariaDB)
backend Backend_lxdb_mariadb
    # health check: Health_TCP
    mode tcp
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s
    timeout server 30s
    server lxdb_mariadb 10.10.10.5:3306 check inter 2s





listen local_statistics
    bind            127.0.0.1:8822
    mode            http
    stats uri       /haproxy?stats
    stats realm     HAProxy\ statistics
    stats admin     if TRUE

# statistics are DISABLED