ip4="104.167.242.171"
ip6="2602:fccf:1:2171::"
table <www> { 127.0.0.1 }
table <bnc> { 127.0.0.1 }
table <mail> { 127.0.0.1 }
log connection


http protocol https {
        match request header append "X-Forwarded-For" value "$REMOTE_ADDR"
        match request header append "X-Forwarded-By" \
            value "$SERVER_ADDR:$SERVER_PORT"
        match request header set "Connection" value "close"
        tcp { sack, backlog 128 }
        tls { keypair chewbakka.host.oddprotocol.org }
	tls { keypair bnc.chewbakka.host.oddprotocol.org }
        tls { keypair mail.chewbakka.host.oddprotocol.org }
        match request header "Host" value "chewbakka.host.oddprotocol.org" forward to <www>
        match request header "Host" value "bnc.chewbakka.host.oddprotocol.org" forward to <bnc>
        match request header "Host" value "mail.chewbakka.host.oddprotocol.org" forward to <mail>
}
relay wwwtls {
        listen on $ip4 port 443 tls
        protocol https
        forward to <www> port 80 check icmp
        forward to <bnc> port 31337 check icmp
        forward to <mail> port 80 check icmp
}
relay www6tls {
        listen on $ip6 port 443 tls
        protocol https
        forward to <www> port 80 check icmp
        forward to <bnc> port 31337 check icmp
        forward to <mail> port 80 check icmp
}