fedora-infra_ansible/roles/httpd/reverseproxy/templates/reversepassproxy.conf

{% if rewrite %}
RewriteEngine On
RewriteRule ^{{remotepath}}$ %{REQUEST_URI}/ [R=301]

{% endif %}
{% if header_scheme %}
RequestHeader set X-Forwarded-Scheme https early
RequestHeader set X-Scheme https early
RequestHeader set X-Forwarded-Proto https early

{% endif %}
{% if header_expect %}
RequestHeader unset Expect early

{% endif %}
{% if keephost %}
ProxyPreserveHost On
{% endif %}

{% if balancer_name is defined %}
SSLProxyEngine On

{% if targettype is defined and targettype == "openshift" %}
  SSLProxyVerify require
  SSLProxyCheckPeerName Off
  SSLProxyCACertificateFile "/etc/haproxy/os-master.pem"
{% endif %}

<Proxy "balancer://{{balancer_name}}-websocket">
  {% for member in balancer_members %}
    BalancerMember "wss://{{ member }}"
  {% endfor %}
</Proxy>

RewriteEngine on
RewriteCond %{HTTP:Upgrade} ^WebSocket$ [NC]
RewriteCond %{HTTP:Connection} ^Upgrade$ [NC]
RewriteRule .* "balancer://{{ balancer_name }}-websocket%{REQUEST_URI}" [P]

<Proxy "balancer://{{balancer_name}}">
  {% for member in balancer_members %}
    BalancerMember "https://{{ member }}"
  {% endfor %}
</Proxy>
ProxyPass {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
ProxyPassReverse {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
{% else %}
ProxyPass {{ localpath }} {{ proxyurl }}{{remotepath}}
ProxyPassReverse {{ localpath }} {{ proxyurl }}{{remotepath}}
{% endif %}