global
        log 127.0.0.1   local0 debug
        maxconn 1024
        chroot /var/haproxy
        uid 604
        gid 604
        daemon
        pidfile /var/run/haproxy.pid

defaults
    log     global
    option  dontlognull
    option  redispatch
    retries 3
    timeout connect 5s
    timeout client  30s
    timeout server  30s
    timeout http-request 10s
    timeout queue 30s
    maxconn 3000

frontend http-in
    bind *:80 alpn h2,http/1.1
    mode http
    acl is_redmine hdr(host) -i jira.dom
    acl is_redmine hdr(host) -i redmine.dom
    acl is_gitea hdr(host) -i gitea.dom
    acl is_netbox hdr(host) -i netbox.dom
    acl is_smokeping hdr(host) -i smokeping.dom
    acl is_audioteka hdr(host) -i audioteka.dom
    acl is_pve hdr(host) -i pve.dom

    use_backend redmine_backend if is_redmine
    use_backend gitea_backend if is_gitea
    use_backend netbox_backend if is_netbox
    use_backend smokeping_backend if is_smokeping
    use_backend audioteka_backend if is_audioteka
    use_backend pve_backend if is_pve

backend redmine_backend
    mode http
    server jira_server 192.168.0.235:80 check

backend gitea_backend
    mode http
    server gitea_server 192.168.0.135:3000 check

backend netbox_backend
    mode http
    server netbox_server 192.168.0.151:8000 check

backend smokeping_backend
    mode http
    server smokeping_server 192.168.0.228:80 check

backend audioteka_backend
    mode http
    server audioteka_server 192.168.0.151:13378 check

backend pve_backend
  mode http
  balance source
  http-reuse always
  cookie SERVER insert indirect nocache
  option forwardfor
  timeout tunnel 1h
  http-request set-header X-Forwarded-Port %[dst_port]
  #http-request add-header X-Forwarded-Proto https if { ssl_fc }
  http-request add-header X-Forwarded-Proto http
  server pve  192.168.0.60:8006  ssl verify none check port 8006 inter 5s rise 2 fall 2 cookie pve
  server pve1 192.168.0.170:8006 ssl verify none check port 8006 inter 5s rise 2 fall 2 cookie pve1
  server pve2 192.168.0.147:8006 ssl verify none check port 8006 inter 5s rise 2 fall 2 cookie pve2
  server pve3 192.168.0.171:8006 ssl verify none check port 8006 inter 5s rise 2 fall 2 cookie pve3
  server pve4 192.168.0.40:8006  ssl verify none check port 8006 inter 5s rise 2 fall 2 cookie pve4
  server pve5 192.168.0.50:8006  ssl verify none check port 8006 inter 5s rise 2 fall 2 cookie pve5