haproxy.cfg

global
	tune.ssl.default-dh-param 1024
	# https://github.com/haproxytech/haproxy-lua-cors
	lua-load /usr/local/etc/haproxy/cors.lua
	# https://www.haproxy.com/blog/introduction-to-haproxy-logging/
	log stdout format raw daemon info
	log stderr format raw daemon info

defaults
	timeout connect 5s
	timeout client 50s
	timeout server 50s
	default-server init-addr last,libc,none

resolvers docker-bridge-resolver
	nameserver docker-resolver 127.0.0.11:53
	hold valid 0ms

http-errors balena-http-errors
	errorfile 400 /etc/haproxy/errors/400.http
	errorfile 401 /etc/haproxy/errors/401.http
	errorfile 403 /etc/haproxy/errors/403.http
	errorfile 404 /etc/haproxy/errors/404.http
	errorfile 500 /etc/haproxy/errors/500.http
	errorfile 502 /etc/haproxy/errors/502.http
	errorfile 503 /etc/haproxy/errors/503.http

frontend haproxy-metrics
	mode http
	option forwardfor
	bind *:1936
	http-request add-header X-Forwarded-Proto http
	stats enable
	stats uri /metrics
	stats auth balena:haproxy