haproxy.cfg

global
	log /dev/log	local0
	log /dev/log	local1 notice
	chroot /var/lib/haproxy
	stats socket /run/haproxy/admin.sock mode 660 level admin
	stats timeout 30s
	user haproxy
	group haproxy
	daemon
  
  # Default SSL material locations
	ca-base /etc/ssl/certs
	crt-base /etc/ssl/private

	tune.ssl.default-dh-param 2048
	ssl-default-bind-options no-sslv3
	ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
	
defaults
	log	global
	mode	http
	option	httplog
	option	dontlognull
        timeout connect 5000
        timeout client  50000
        timeout server  50000
	errorfile 400 /etc/haproxy/errors/400.http
	errorfile 403 /etc/haproxy/errors/403.http
	errorfile 408 /etc/haproxy/errors/408.http
	errorfile 500 /etc/haproxy/errors/500.http
	errorfile 502 /etc/haproxy/errors/502.http
	errorfile 503 /etc/haproxy/errors/503.http
	errorfile 504 /etc/haproxy/errors/504.http
	retries 3
	maxconn 5000

# Stats		
listen stats # Define a listen section called "stats"
  bind :9000 # Listen on localhost:9000
  mode http
  stats enable  # Enable stats page
  stats hide-version  # Hide HAProxy version
  stats realm Haproxy\ Statistics  # Title text for popup window
  stats uri /haproxy_stats  # Stats URI
  stats auth Username:Password  # Authentication credentials


frontend http-in
	bind *:80
	redirect scheme https if !{ ssl_fc }

frontend https-in
	bind *:443 ssl crt /etc/haproxy/certs/your.domain.com.pem

	acl letsencrypt		path_beg	/.well-known/acme-challenge/
	acl odoo			hdr(host) -i your.domain.com	
	
	use_backend		bck_letsencrypt   if letsencrypt
	use_backend		bck_odoo          if odoo
	
backend bck_letsencrypt
	server letsencrypt 127.0.01:54321
	
backend bck_odoo
	acl path_longpoll path_beg /longpolling
	use-server longpoll if path_longpoll
	option forwardfor
	server normal 10.10.1.51:8069 check
	server longpoll 10.10.1.51:8072 check