Debian does not support system-wide SSL cipher suite profiles of course, so these options need to be specified explicitly when deploying HAProxy on Debian-based machines.