global
    log /dev/log local0
    maxconn 2000
    ssl-default-bind-options ssl-min-ver TLSv1.2

defaults
    mode http
    log global
    option httplog
    option forwardfor
    timeout connect 5s
    timeout client 30s
    timeout server 30s

frontend https_frontend
    bind :443 ssl crt /etc/haproxy/certs/www.example.net.pem alpn h2,http/1.1
    http-request set-header X-Forwarded-Proto https
    default_backend app_servers

backend app_servers
    server app1 10.0.0.21:80 check