global
    log stdout format raw local0
    ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11
    ssl-default-bind-ciphers PROFILE=SYSTEM

defaults
    log     global
    mode    http
    option  httplog
    timeout connect 5s
    timeout client  30s
    timeout server  30s
    http-reuse safe

frontend fe_http
    bind :80
    http-request redirect scheme https code 301

frontend fe_https
    bind :443 ssl crt /certs/selfsigned.pem
    http-request set-header X-Forwarded-For %[src]
    http-request set-header X-Forwarded-Proto https
    http-response del-header Server

    acl host_hosts            hdr(host) -i hosts.internal
    acl host_routerosbackup   hdr(host) -i routerosbackup.internal
    acl host_routerosupdate   hdr(host) -i routerosupdate.internal
    acl host_sslmonitor       hdr(host) -i sslmonitor.internal

    use_backend be_hosts            if host_hosts
    use_backend be_routerosbackup   if host_routerosbackup
    use_backend be_routerosupdate   if host_routerosupdate
    use_backend be_sslmonitor       if host_sslmonitor
    default_backend be_404

backend be_hosts
    server s1 hosts_app:5580 check

backend be_routerosbackup
    server s1 routeros_backup:5581 check

backend be_routerosupdate
    server s1 routeros_update:5582 check

backend be_sslmonitor
    server s1 ssl_monitor:5583 check

backend be_404
    http-request deny deny_status 404