#---------------------------------------------------------------------
# Global settings
#---------------------------------------------------------------------
global
    log         /dev/log local0

    pidfile     /var/run/haproxy.pid
    maxconn     4000
    user        haproxy
    group       haproxy
    daemon

    # turn on stats unix socket
    stats socket /var/lib/haproxy/stats

    # utilize system-wide crypto-policies
    ssl-default-bind-ciphers {{ haproxy_ssl_default_ciphers }}
{% if haproxy_ssl_default_server_ciphers|d %}
    ssl-default-server-ciphers {{ haproxy_ssl_default_server_ciphers }}
{% endif %}
{% if haproxy_ssl_default_bind_options|d %}
    ssl-default-bind-options {{ haproxy_ssl_default_bind_options }}
{% endif %}