global
  log         127.0.0.1 local2

  chroot      /var/lib/haproxy
  pidfile     /var/run/haproxy.pid
  maxconn     4000
  user        haproxy
  group       haproxy
  daemon

  # turn on stats unix socket
  stats socket /var/lib/haproxy/stats

defaults
  log global
  mode http
  retries 3
  timeout check 20s
  timeout client 400s
  timeout connect 20s
  timeout http-keep-alive 130s
  timeout queue 1m
  timeout server 400s
  timeout http-request 240s
  option  dontlognull
  option  http-server-close
  option  httplog
  option  redispatch
  balance roundrobin

frontend stats
  bind *:8404
  stats enable
  stats uri /
  stats refresh 10s

frontend myfrontend
  log global
  bind *:80
  bind *:443 ssl crt /etc/haproxy/server.pem ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
  mode http
  option httplog
  http-request add-header X-Forwarded-Proto http
  http-request redirect scheme https unless { ssl_fc }

  use_backend %[req.hdr(host),lower,map_reg(/etc/haproxy/haproxy_map.map,no-match)]
  default_backend no-match

backend no-match
  mode http
  acl not_found               status 404
  rsprep ^HTTP/1.1\ 404\ (.*)$ HTTP/1.1\ 302\ Found\nLocation:\ / if not_found