ci-haproxy-cfg.txt

global
	maxconn 64
	daemon
	log 127.0.0.1 len 65535 format rfc5424 local0
	log 127.0.0.1 len 65535 format rfc5424 local1 notice

defaults
	log global
	option httplog
	mode http
	timeout connect 5s
	timeout client	15s
	timeout server	120s
	timeout http-keep-alive 5s
	timeout check	9990

frontend web80
	description Redirect to https
	bind 0.0.0.0:80 name web80
	redirect scheme https
	default_backend be_deny

frontend web
	description One frontend to rule them all
	bind 0.0.0.0:443 name web443 ssl crt /etc/ssl/certs/local/selfsigned.pem alpn h2,http/1.1 npn h2,http/1.1 allow-0rtt curves secp521r1:secp384r1
	bind quic4@0.0.0.0:443 name quic443 ssl crt /etc/ssl/certs/local/selfsigned.pem proto quic alpn h3,h3-29,h3-28,h3-27 npn h3,h3-29,h3-28,h3-27 allow-0rtt curves secp521r1:secp384r1
	http-after-response add-header alt-svc 'h3=":443"; ma=7200'
	default_backend be-local-81
	stats enable
	stats uri /hapeek
	stats refresh 15

backend be_deny
	description Back end with no servers that denies all requests.
	no log
	log 127.0.0.1 len 65535 format rfc5424 local0 notice err
	http-request deny

backend be-local-81
	option httpchk
	server localhost 127.0.0.1:81