NewsBlur/config/debug_haproxy.conf

global
  maxconn 100000
  daemon
  ca-base /srv/newsblur/config/certificates
  crt-base /srv/newsblur/config/certificates
  tune.bufsize 32000
  tune.maxrewrite 8196
  tune.ssl.default-dh-param 2048
  log 127.0.0.1 local0 notice
  log 127.0.0.1 local1 debug

defaults
  log global
  maxconn 100000
  mode http
  option forwardfor
  option http-server-close
  option httpclose
  # option log-health-checks
  option log-separate-errors
  option httplog
  option redispatch
  option abortonclose
  timeout connect 5s
  timeout client 30s
  timeout server 30s
  timeout tunnel 1h
  retries 3
  errorfile 502 /srv/newsblur/templates/502.http
  errorfile 503 /srv/newsblur/templates/502.http
  errorfile 504 /srv/newsblur/templates/502.http
  
frontend public
  bind :80
  bind :443 ssl crt newsblur.pem ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES128-SHA:AES256-SHA256:AES256-SHA no-sslv3
  rspadd Strict-Transport-Security:\ max-age=0;\ includeSubDomains
  option http-server-close
  
  # Redirect all HTTP traffic to HTTPS
  # redirect scheme https if !{ ssl_fc }

  acl gunicorn_dead nbsrv(gunicorn) lt 1
  acl nginx_dead nbsrv(nginx) lt 1
  acl mx_mode nbsrv(maintenance) lt 1
  acl is_unread_count url_beg /reader/feed_unread_count
  
  monitor-uri /status
  monitor fail  if gunicorn_dead
  monitor fail  if nginx_dead
  monitor fail  if mx_mode

  use_backend node_socket if { path_beg /socket.io/ }
  use_backend node_favicon if { path_beg /rss_feeds/icon/ }
  use_backend nginx if { path_beg /media/ }
  use_backend nginx if { path_beg /static/ }
  use_backend nginx if { path_beg /favicon }
  use_backend nginx if { path_beg /crossdomain/ }
  use_backend nginx if { path_beg /robots }
  use_backend nginx if { path_beg /munin/ }
  
  use_backend nginx if mx_mode
  
  use_backend gunicorn_counts if is_unread_count
  use_backend gunicorn unless gunicorn_dead || nginx_dead
 
backend node_socket
  balance roundrobin
  server nodedebug 127.0.0.1:8888    check inter 2000ms

backend node_favicon
  balance roundrobin
  server nodedebug 127.0.0.1:81      check inter 2000ms

backend nginx
  balance roundrobin
  option httpchk GET /_nginxchk
  http-check expect rstatus 200|503
  server nginxdebug 127.0.0.1:81     check inter 2000ms

backend gunicorn
  balance roundrobin
  option httpchk GET /_haproxychk
  server gunicorndebug 127.0.0.1:8000     check inter 600000ms

backend gunicorn_counts
  balance roundrobin
  option httpchk GET /_haproxychk
  server gunicorndebug 127.0.0.1:8000     check inter 600000ms

backend maintenance
  option httpchk HEAD /maintenance HTTP/1.1\r\nHost:\ www
  http-check expect status 404
  http-check send-state
  server nginxdebug 127.0.0.1:81     check inter 2000ms
  
frontend stats
  bind :1936 ssl crt newsblur.pem
  default_backend stats
 
backend stats
    stats enable
    stats hide-version
    stats realm Haproxy\ Statistics
    stats uri /
    stats auth sclay:password
    stats refresh 15s