HAproxy frontend/backend configuration

haproxy.cfg

#---------------------------------------------------------------------
# FrontEnd Configuration
#---------------------------------------------------------------------
frontend http
    bind *:80
    option http-server-close
    option forwardfor
    default_backend backend

frontend https
    bind *:443 ssl crt /etc/haproxy/haproxy.pem
    mode http
    option http-server-close
    option forwardfor
    reqadd X-Forwarded-Proto:\ https
    reqadd X-Forwarded-Port:\ 443
    # set HTTP Strict Transport Security (HTST) header
    rspadd  Strict-Transport-Security:\ max-age=15768000
    default_backend             backend_ssl
#---------------------------------------------------------------------
# BackEnd roundrobin as balance algorithm
#---------------------------------------------------------------------
backend backend
    balance roundrobin                                    #Balance algorithm
    option httpchk HEAD / HTTP/1.1\r\nHost:\ localhost    #Check the server application is up and healty - 200 status code
    server web1 web1.example.com:80 check                 #apache 
    server web2 web2.example.com:80 check                 #apache
backend backend_ssl
    server web1 web1.example.com:443 ssl verify none
    server web1 web2.example.com:443 ssl verify none