push

haproxy/haproxy.cfg

@@ -11,12 +11,13 @@ defaults
     timeout client  30s
     timeout server  30s
     http-reuse safe
-    option httpchk GET /
+
+frontend fe_http
+    bind :80
+    http-request redirect scheme https code 301
 
 frontend fe_https
     bind :443 ssl crt /certs/selfsigned.pem
-    bind :80
-
     http-request set-header X-Forwarded-For %[src]
     http-request set-header X-Forwarded-Proto https
     http-response del-header Server
@@ -32,7 +33,6 @@ frontend fe_https
     use_backend be_sslmonitor       if host_sslmonitor
     default_backend be_404
 
-# backendy po nazwach usług w tej samej sieci "intranet"
 backend be_hosts
     server s1 hosts_app:5580 check