global log /dev/log local0 log /dev/log local1 notice pidfile /run/haproxy.pid stats timeout 30s user haproxy group haproxy daemon maxconn 10000 defaults log global mode http option httplog option dontlognull listen https bind *:443 mode tcp timeout http-request 10m timeout connect 10m timeout client 10m timeout server 10m server default {{ wireguard.clients.ingress.ip }}:8443 send-proxy listen http bind *:80 stats enable stats show-node stats uri /haproxy stats auth stats:{{ haproxy.stats_pass }} timeout http-request 10m timeout connect 10m timeout client 10m timeout server 10m server default {{ wireguard.clients.ingress.ip }}:880 check {% for port in haproxy.exposed_ports %} listen expose_{{ port }} bind *:{{ port }} mode tcp server default {{ wireguard.clients.ingress.ip }}:{{ port }} {% endfor %}