frontend main
    bind :::80

    use_backend gitea if { hdr(host) -i git.pyrocufflink.blue }
    use_backend gitea if { hdr(host) -i git.pyrocufflink.net }
    use_backend jenkins if { hdr(host) -i jenkins.pyrocufflink.blue }
    use_backend jenkins if { hdr(host) -i jenkins.pyrocufflink.net }
    use_backend bitwarden if { hdr(host) -i bitwarden.pyrocufflink.blue }
    use_backend bitwarden if { hdr(host) -i bitwarden.pyrocufflink.net }
    use_backend nextcloud if { hdr(host) -i nextcloud.pyrocufflink.net }
    default_backend web


frontend main-tls
    bind :::443
    mode tcp
    option tcplog

    tcp-request inspect-delay 5s
    tcp-request content accept if { req_ssl_hello_type 1 }

    use_backend gitea-tls if { req_ssl_sni -i git.pyrocufflink.blue }
    use_backend gitea-tls if { req_ssl_sni -i git.pyrocufflink.net }
    use_backend jenkins-tls if { req_ssl_sni -i jenkins.pyrocufflink.blue }
    use_backend jenkins-tls if { req_ssl_sni -i jenkins.pyrocufflink.net }
    use_backend bitwarden-tls if { req_ssl_sni -i bitwarden.pyrocufflink.blue }
    use_backend bitwarden-tls if { req_ssl_sni -i bitwarden.pyrocufflink.net }
    use_backend nextcloud-tls if { req_ssl_sni -i nextcloud.pyrocufflink.net }
    use_backend web-tls if { req_ssl_sni -i darkchestofwonders.us }
    use_backend web-tls if { req_ssl_sni -i pyrocufflink.net }
    use_backend web-tls if { req_ssl_sni -i -m end chmod777.sh }
    default_backend openvpn