global
    log stdout format raw local0
    maxconn 4096
    daemon

defaults
    log global
    mode http
    option httplog
    option dontlognull
    option forwardfor
    option http-server-close
    timeout connect 5000ms
    timeout client 50000ms
    timeout server 50000ms
    timeout http-request 10000ms
    errorfile 400 /etc/haproxy/errors/400.http
    errorfile 403 /etc/haproxy/errors/403.http
    errorfile 408 /etc/haproxy/errors/408.http
    errorfile 500 /etc/haproxy/errors/500.http
    errorfile 502 /etc/haproxy/errors/502.http
    errorfile 503 /etc/haproxy/errors/503.http
    errorfile 504 /etc/haproxy/errors/504.http

# ============================================================================
# STATS & MONITORING
# ============================================================================
frontend stats
    bind *:8404
    stats enable
    stats uri /stats
    stats refresh 30s
    stats admin if TRUE

# ============================================================================
# HTTP FRONTEND (Port 80)
# ============================================================================
frontend http_frontend
    bind *:80
    mode http
    
    # Redirect HTTP to HTTPS (uncomment for production)
    # redirect scheme https code 301 if !{ ssl_fc }
    
    # ACLs for routing
    acl is_api path_beg /api/v1
    acl is_ws path_beg /ws
    acl is_stream path_beg /stream
    acl is_web path_beg /
    
    # Route to appropriate backend
    use_backend backend_api if is_api
    use_backend chat_ws if is_ws
    use_backend stream_ws if is_stream
    use_backend web_frontend if is_web

# ============================================================================
# HTTPS FRONTEND (Port 443) - Uncomment and configure for production
# ============================================================================
# frontend https_frontend
#     bind *:443 ssl crt /etc/ssl/certs/veza.pem
#     mode http
#     
#     # ACLs for routing
#     acl is_api path_beg /api/v1
#     acl is_ws path_beg /ws
#     acl is_stream path_beg /stream
#     acl is_web path_beg /
#     
#     # Route to appropriate backend
#     use_backend backend_api if is_api
#     use_backend chat_ws if is_ws
#     use_backend stream_ws if is_stream
#     use_backend web_frontend if is_web

# ============================================================================
# BACKENDS
# ============================================================================

# Backend API (Go)
backend backend_api
    mode http
    balance roundrobin
    option httpchk GET /api/v1/health
    http-check expect status 200
    server backend1 backend-api:8080 check inter 5s fall 3 rise 2
    # Add more servers for load balancing:
    # server backend2 backend-api-2:8080 check inter 5s fall 3 rise 2

# Chat WebSocket (Rust)
backend chat_ws
    mode http
    balance roundrobin
    option httpchk GET /health
    http-check expect status 200
    server chat1 chat-server:3000 check inter 5s fall 3 rise 2
    # WebSocket specific options
    timeout tunnel 3600s

# Stream WebSocket (Rust)
backend stream_ws
    mode http
    balance roundrobin
    option httpchk GET /health
    http-check expect status 200
    server stream1 stream-server:3001 check inter 5s fall 3 rise 2
    # WebSocket specific options
    timeout tunnel 3600s

# Web Frontend (React/Vite)
backend web_frontend
    mode http
    balance roundrobin
    option httpchk GET /
    http-check expect status 200
    server web1 web:5173 check inter 5s fall 3 rise 2
    # Add more servers for load balancing:
    # server web2 web-2:5173 check inter 5s fall 3 rise 2