# This file managed by Puppet
global
  daemon  
  group  haproxy
  tune.ssl.default-dh-param  2048
  user  haproxy

defaults
  log  global
  maxconn  8000
  option  redispatch
  retries  3
  stats  enable
  timeout  http-request 10s
  timeout  queue 1m
  timeout  connect 10s
  timeout  client 1m
  timeout  server 1m
  timeout  check 10s

listen apache_exporter_frontend
  bind 10.10.125.27:9117 ssl crt /etc/pki/tls/certs/haproxy_combined.pem no-sslv3 no-tlsv10 no-tlsv11
  mode http
  http-request redirect scheme https code 301 unless { ssl_fc }
  server hp3-stn-1011028.hostingp3.local 127.0.0.1:59117 check

listen node_exporter_frontend
  bind 10.10.125.27:9100 ssl crt /etc/pki/tls/certs/haproxy_combined.pem ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA no-sslv3 no-tlsv10 no-tlsv11
  mode http
  http-request redirect scheme https code 301 unless { ssl_fc }
  server hp3-stn-1011028.hostingp3.local 127.0.0.1:59100 check