frontend ssl
    mode tcp
    bind 0.0.0.0:443 name frontend-ssl
    option tcplog
    tcp-request inspect-delay 2s
    tcp-request content accept  if  { req.ssl_hello_type 1 }
    use_backend main-ssl        if  { req.ssl_hello_type 1 }
    use_backend openvpn         if  !{ req.ssl_hello_type 1 } !{ req.len 0 }
    use_backend ssh             if  !{ req.ssl_hello_type 1 } { req.len 0 }


frontend main
    bind 0.0.0.0:80
    bind 127.0.0.1:8443 ssl crt /etc/haproxy/certs/server.pem crt /etc/haproxy/certs/ accept-proxy
    mode http
    option forwardfor
    default_backend webserver


backend main-ssl
    mode tcp
    server main-ssl 127.0.0.1:8443 send-proxy

backend openvpn
    mode tcp
    server openvpn-localhost 127.0.0.1:110

backend ssh
    mode tcp
    server ssh-localhost 127.0.0.1:22

backend webserver
    server webserver-localhost 127.0.0.1:8080