frontend www_public
    mode http
    bind :80
    bind :443 ssl crt /etc/haproxy/certs/www.example.net.pem alpn h2,http/1.1
    http-request redirect scheme https code 301 unless { ssl_fc }
    default_backend app_servers

backend app_servers
    server app1 10.0.0.21:80 check