haproxy.cfg.j2

global
    daemon
    stats socket /var/run/haproxy.sock level admin
    stats bind-process 1
    maxconn 1000
    pidfile /var/run/haproxy-t1.pid
    log 127.0.0.1 local0
    log 10.7.0.17 local0
    tune.bufsize 16384
    tune.maxrewrite 1024
    spread-checks 4
    nbproc 1

defaults
    errorfile 503 /etc/haproxy-shared/errors/503.http
    errorfile 502 /etc/haproxy-shared/errors/502.http
    mode http
    timeout connect 15s
    timeout client 60s
    timeout server 150s
    timeout queue 60s
    timeout http-request 15s
    timeout http-keep-alive 15s
    option  redispatch
    option  dontlognull
    balance roundrobin

userlist stats-auth
    group admin users admin
    user admin insecure-password hadmin

frontend http-in
	bind *:80
	default_backend webfarm

backend webfarm
	server std-web-1 10.142.185.5:80 maxconn 10 check
{% for host in groups['webfarm'] %}
        server {{ host }} {{ hostvars[host]['ansible_ssh_host'] }}:80 maxconn 10 check
{% endfor %}

userlist UsersFor_HAProxyStatistics
      group admin users admin
      user admin insecure-password hadmin

listen HAProxy-Statistics *:443
      mode http
      stats enable
      stats uri /stats
      option contstats
      stats refresh 10s
      #stats show-node
      #stats show-legends
      acl AuthOkay_ReadOnly http_auth(UsersFor_HAProxyStatistics)
      acl AuthOkay_Admin http_auth_group(UsersFor_HAProxyStatistics) admin
      stats http-request auth realm HAProxy-Statistics unless AuthOkay_ReadOnly
      stats admin if AuthOkay_Admin