global
    log /dev/log local2
    chroot /var/lib/haproxy
    maxconn 4000
    user haproxy
    group haproxy
    daemon
    stats socket /var/lib/haproxy/stats mode 660 level admin

defaults
    log global
    mode tcp
    option tcplog
    option dontlognull
    retries 3
    timeout connect 5s
    timeout client 1h
    timeout server 1h
    timeout check 10s

# http
frontend http_frontend
    bind ip:80
    mode http
    option httplog
    
    acl host_host2 hdr_end(host) -m end host2.tld
    
    use_backend host2_http_srv if is_host2
    default_backend host1_http_srv

backend host1_http_srv
    mode http
    server host1_srv 10.x.102.3:81 check send-proxy-v2

backend host2_http_srv
    mode http
    server host2_srv 10.x.200.1:81 check send-proxy-v2

# https
frontend https_frontend
    bind ip:443
    mode tcp
    option tcplog
    tcp-request inspect-delay 5s
    tcp-request content accept if { req_ssl_hello_type 1 }

    acl host_host2 req_ssl_sni -m end host2.tld
    acl host_host3 req_ssl_sni -i host3.tld

    use_backend host2_https_srv if host_host2
    use_backend host3_https_srv if host_host3
    default_backend host1_https_srv

backend host1_https_srv
    mode tcp
    server host1_srv 10.x.102.3:444 check send-proxy-v2

backend host2_https_srv
    mode tcp
    server host2_srv 10.x.200.1:444 check send-proxy-v2

backend host3_https_srv
    mode tcp
    server host3_srv x.x.x.x:443 check

# gitea
listen gitea_ssh_secure
    bind ip:2211
    bind 127.0.0.1:2211
    mode tcp
    default_backend gitea_ssh_backend

backend gitea_ssh_backend
    mode tcp
    server gitea_srv 10.x.103.3:22 check

# mcsmanager-daemon
listen mcsmanager_service
    bind ip:24444
    mode tcp
    server mcs_srv 10.x.102.3:24445 check send-proxy-v2

# prosody
listen xmpp_c2s
    bind ip:5222
    server prosody_srv 10.x.103.9:5222 check

listen xmpp_legacy_ssl
    bind ip:5223
    server prosody_srv 10.x.103.9:5223 check

listen xmpp_s2s
    bind ip:5269
    server prosody_srv 10.x.103.9:5269 check

listen prosody_proxy65
    bind ip:5000
    server prosody_srv 10.x.103.9:5000 check

listen prosody_components
    bind ip:5270
    server prosody_srv 10.x.103.9:5270 check

listen prosody_bosh_http
    bind ip:5280
    server prosody_srv 10.x.103.9:5280 check