relayd

    table <localbox> { 172.16.0.2 }

    http protocol "https" {
            tcp { nodelay, sack, backlog 256, socket buffer 65536 }
            tls { no tlsv1.0, ciphers 'HIGH:!aNULL' }
            tls no session tickets
            match request header append "X-Forwarded-For" value "$REMOTE_ADDR"
            match request header append "X-Forwarded-By" value "$SERVER_ADDR:$SERVER_PORT"
            match request header append "X-Forwarded-Proto" value "https"
            match request header set "Connection" value "close"
            match header log "Host"
            match header log "X-Forwarded-For"
            match header log "User-Agent"
            match url log
            tls keypair git.example.com
            tls keypair cicd.example.com
            pass request quick from 93.184.215.14 header "Host" value "git.example.com" forward to <localbox>
            pass request quick from 93.184.215.14 header "Host" value "vcs.example.com" forward to <localbox>
    }
relay https {
            listen on 188.114.97.3 port 443 tls
            protocol "https"
            forward to <localbox> port 80
}