global uid 80 gid 80 chroot /var/haproxy daemon stats socket /var/run/haproxy.socket group proxy mode 775 level admin expose-fd listeners nbproc 1 nbthread 3 hard-stop-after 60s no strict-limits maxconn 1000 tune.ssl.default-dh-param 2048 spread-checks 2 tune.bufsize 16384 tune.lua.maxmem 0 log /var/run/log local0 debug lua-prepend-path /tmp/haproxy/lua/?.luadefaults log global option redispatch -1 maxconn 500 timeout client 30s timeout connect 30s timeout server 30s retries 3 default-server init-addr last,libc# autogenerated entries for ACLs# autogenerated entries for config in backends/frontends# autogenerated entries for stats# Frontend: https-server ()frontend https-server http-response set-header Strict-Transport-Security "max-age=15768000; includeSubDomains" bind 0.0.0.0:443 name 0.0.0.0:443 ssl prefer-client-ciphers ssl-min-ver TLSv1.2 ciphers [...] crt-list /tmp/haproxy/ssl/61912cd8965147.28191565.certlist mode http option http-keep-alive option forwardfor # tuning options timeout client 30s # logging options # ACL: vikunja_condition acl acl_620ca7739b6861.33531864 hdr_beg(host) -i todo.mydomain.tld # ACTION: todo_rule use_backend todo_backend if acl_620ca7739b6861.33531864# Backend: acme_challenge_backend (Added by ACME Client plugin)backend acme_challenge_backend # health checking is DISABLED mode http balance source # stickiness stick-table type ip size 50k expire 30m stick on src # tuning options timeout connect 30s timeout server 30s http-reuse safe server acme_challenge_host 127.0.0.1:43580 # Backend: todo_backend (Vikunja Backend)backend todo_backend # health checking is DISABLED mode http balance source # stickiness stick-table type ip size 50k expire 30m stick on src # tuning options timeout connect 30s timeout server 30s http-reuse safe server todo todo.lan:80 # Backend: immich_backend (immich Backend)backend immich_backend # health checking is DISABLED mode http balance source # stickiness stick-table type ip size 50k expire 30m stick on src # tuning options timeout connect 30s timeout server 30s http-reuse safe server immich immich.lan:80 # statistics are DISABLED