global chroot /var/lib/haproxy stats socket /admin.sock mode 660 level admin stats timeout 30s user haproxy group haproxy daemon ca-base /etc/ssl/certs crt-base /crypt ssl-default-bind-ciphers kEECDH+aRSA+AES:kRSA+AES:+AES256:RC4-SHA:!kEDH:!LOW:!EXP:!MD5:!aNULL:!eNULL ssl-default-bind-options no-sslv3 defaults #log global mode http #option httplog #option dontlognull timeout connect 5000 timeout client 50000 timeout server 50000 frontend https bind *:443 ssl crt /data/cert.pem reqadd X-Forwarded-Proto:\ https default_backend www-backend backend www-backend server one target:80