frontend horizon_front
    mode http
    http-request del-header X-Forwarded-Proto
    
    option httplog
    option forwardfor
    http-request set-header X-Forwarded-Proto https if { ssl_fc }
    bind 192.0.2.10:443 ssl crt /etc/haproxy/certificates/haproxy-internal.pem alpn h2,http/1.1
    default_backend horizon_back

backend horizon_back
    mode http
    balance roundrobin
    option httpchk
    server primary 192.0.2.1:8080 check check-ssl inter 2000 rise 2 fall 5 ssl verify required ca-file ca-certificates.crt 

frontend horizon_redirect_front
    mode http
    bind 192.0.2.10:80
    redirect scheme https code 301 if !{ ssl_fc }