add prosody reverse proxy

hosts.yaml

@@ -14,6 +14,7 @@ all:
       # <Domain>: <Backend>
       smokeping.0rpheus.net: smokeping
       seafile.0rpheus.net: odroid
+      jabber.0rpheus.net: prosody
       tt-rss.0rpheus.net: odroid
       mail.0rpheus.net: apache
       blog.0rpheus.net: apache
@@ -25,6 +26,10 @@ all:
         server_defs:
           - "apache 127.0.0.1:8080 check"
 
+      prosody:
+        server_defs:
+          - "prosody 127.0.0.1:5281 check ssl verify none"
+
       odroid:
         server_defs:
           - "odroid 172.30.30.2:80 check"

roles/haproxy/templates/haproxy.cfg

@@ -33,9 +33,10 @@ defaults
     option  splice-auto
 
     option  forwardfor
-    # option  forceclose
     option  socket-stats
 
+    no option http-use-htx
+
     timeout http-request 20s 
     timeout connect       5s
     timeout client       50s
@@ -54,7 +55,7 @@ defaults
 
 frontend http
     bind *:80  name http
-    bind *:443 name https ssl crt /etc/haproxy/certs/mail.0rpheus.net.pem crt /etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1 npn h2,http/1.1
+    bind *:443 name https ssl crt /etc/haproxy/certs/mail.0rpheus.net.pem crt /etc/haproxy/certs/ ecdhe secp384r1 alpn h2,http/1.1
 
     compression algo gzip
     compression type text/html text/plain text/javascript application/javascript application/xml text/css