{ ... }:
{
  # TODO: Some way to automatically configure?
  services.haproxy = {
    enable = true;
    config = ''
      global
        maxconn 4096

      defaults
        mode tcp
        timeout connect 5s
        timeout client 30s
        timeout server 30s

      frontend http
        bind *:80
        bind *:443
        default_backend main

      backend main
        server jupiter 10.0.0.2:80 send-proxy-v2
        server jupiter_ssl 10.0.0.2:443 send-proxy-v2
    '';
  };
}