#
# Automatically generated configuration.
# Do not edit this file manually.
#

global
    uid                         80
    gid                         80
    chroot                      /var/haproxy
    daemon
    stats                       socket /var/run/haproxy.socket group proxy mode 775 level admin
    nbproc                      1
    nbthread                    1
    tune.ssl.default-dh-param   2048
    spread-checks               2
    tune.chksize                16384
    tune.bufsize                16384
    tune.lua.maxmem             0
    log /var/run/log local0 info

defaults
    log     global
    option redispatch -1
    timeout client 30s
    timeout connect 30s
    timeout server 30s
    retries 3
    default-server init-addr last,libc

# autogenerated entries for ACLs


# autogenerated entries for config in backends/frontends

# autogenerated entries for stats




# Frontend: public_service_http (public_service_http)
frontend public_service_http
    bind 0.0.0.0:80 name 0.0.0.0:80
    mode http
    option http-keep-alive
    default_backend acme_challenge_backend
    # tuning options
    timeout client 30s

    # logging options
    # ACL: find_acme_challenge
    acl acl_605e1a292ddce1.15865947 path_beg -i /.well-known/acme-challenge/
    # ACL: no_find_acme_challenge
    acl acl_6061a61b811977.92979045 path_beg -i /.well-known/acme-challenge/
    # ACL: no_HTTPS
    acl acl_605e848931a523.42844100 req.proto_http
    # ACL: cond_host_matches_host2_example.com
    acl acl_605e858f8de9e6.77623103 hdr(host) -i host2.example.com
    # ACL: cond_host_matches_host3_example.com
    acl acl_605e85820c35d5.14821142 hdr(host) -i host3.example.com
    # ACL: cond_host_matches_host1_example.com
    acl acl_605e8558014977.72403767 hdr(host) -i host1.example.com

    # ACTION: redirect_acme_challenges
    use_backend acme_challenge_backend if acl_605e1a292ddce1.15865947
    # ACTION: rule_redirect_http_https
    http-request redirect scheme https code 301 if !acl_6061a61b811977.92979045 acl_605e848931a523.42844100
    # ACTION: rule_no_host_match
    http-request deny unless acl_605e858f8de9e6.77623103 || acl_605e85820c35d5.14821142 || acl_605e8558014977.72403767 || acl_605e1a292ddce1.15865947
    # ERROR FILE: Unknown_FQDN
    errorfile 403 /tmp/haproxy/errorfiles/605e84df732dd0.89785772.txt


# Frontend (DISABLED): public_service_https (public_service_https)

# Backend: acme_challenge_backend (Added by Let's Encrypt plugin)
backend acme_challenge_backend
    # health checking is DISABLED
    mode http
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s
    timeout server 30s
    http-reuse safe
    server acme_challenge_host 127.0.0.1:43580

# Backend: backed_pool_host1 (backed_pool_host1)
backend backed_pool_host1
    # health checking is DISABLED
    mode http
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s
    timeout server 30s
    http-reuse safe
    server real_server_host1 host1.example.com:80

# Backend: backed_pool_host3 (backed_pool_host3)
backend backed_pool_host3
    # health checking is DISABLED
    mode http
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s
    timeout server 30s
    http-reuse safe
    server real_server_host3 host3.example.com:80

# Backend: backed_pool_host2 (backed_pool_host2)
backend backed_pool_host2
    # health checking is DISABLED
    mode http
    balance source
    # stickiness
    stick-table type ip size 50k expire 30m
    stick on src
    # tuning options
    timeout connect 30s
    timeout server 30s
    http-reuse safe
    server real_server_host2 host2.example.com:80