Haproxy configuration

haproxy.md

@@ -68,6 +68,18 @@ Use this utility to convert certs outputted by Certbot to ones compatible by HAP
 
 * [LE-Combiner](https://github.com/theel0ja/haproxy-scripts/blob/master/le-combiner/)
 
+```bash
+sudo su -
+
+mkdir /etc/haproxy/certs
+chmod 700 /etc/haproxy/certs
+
+git clone https://github.com/theel0ja/haproxy-scripts.git
+ln -s ~/haproxy-scripts/le-combiner/le-combiner.sh ~/le-combiner.sh
+
+./le-combiner.sh
+```
+
 To generate certificates, see [this guide](certbot.md#http-used-by-haproxy-examples).
 
 ### Cronjob (root)
@@ -88,6 +100,10 @@ To generate certificates, see [this guide](certbot.md#http-used-by-haproxy-examp
 
 ```haproxy
 frontend https-in
+        bind *:443 ssl crt /etc/haproxy/certs/ alpn h2,http/1.1
+        reqadd X-Forwarded-Proto:\ https
+
+        http-response set-header Strict-Transport-Security max-age=15768000
 
         ...