defaults
    # never fail on address resolution
    default-server init-addr libc,none
    option log-health-checks
    option httplog

resolvers myresolver
    nameserver a 127.0.0.1:53
    hold valid 1000s

global
    ca-base /etc/ssl/certs
    maxconn     20000
    log         /dev-log local0 debug
    user        haproxy
    chroot      /usr/share/haproxy
    pidfile     /run/haproxy.pid
    daemon

frontend  main
    bind :3129
    mode                 http
    log                  global
    maxconn              8000
    timeout              client  30s
    default_backend             app

backend app
    log                  global
    mode        http
    reqadd      Proxy-Authorization:\ Basic\ xxx
    timeout     connect 5s
    timeout     server  30s
    timeout     queue   30s
    server  app1 myproxyhost:443 resolvers myresolver ssl verify required ca-file ca-certificates.crt