From c8aa798e276970feb72c927ed61382227727ba5b Mon Sep 17 00:00:00 2001
From: deflax <daniel@deflax.net>
Date: Wed, 29 Jan 2025 17:10:06 +0000
Subject: [PATCH] redirect to https

---
 config/haproxy/haproxy.cfg | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config/haproxy/haproxy.cfg b/config/haproxy/haproxy.cfg
index 37582db..3a78f45 100644
--- a/config/haproxy/haproxy.cfg
+++ b/config/haproxy/haproxy.cfg
@@ -41,6 +41,7 @@ frontend web
     bind :443 ssl crt /certificates strict-sni
 
     http-request return status 200 content-type text/plain lf-string "%[path,field(-1,/)].${ACCOUNT_THUMBPRINT}\n" if { path_beg '/.well-known/acme-challenge/' }
+    http-request redirect scheme https code 301 unless { ssl_fc }
 
     http-request set-header X-Forwarded-Protocol https
     http-request set-header X-Forwarded-Proto https