ext_ip="10.0.0.4"

table <self> { "127.0.0.1" }
table <alpine0> { "100.64.1.3" }

http protocol wwwtls {
        tls keypair "yonderly.org"
        #tls keypair "alpine0.yonderly.org"
        
        match request header append "X-Forwarded-For" value "$REMOTE_ADDR"
        match request header append "X-Forwarded-By" \
            value "$SERVER_ADDR:$SERVER_PORT"
        match request header set "Connection" value "close"
        
        block
        
        pass request header "Host" value "yonderly.org" \
                forward to <self>
        ...
        pass request header "Host" value "alpine0.yonderly.org" \
                forward to <alpine0>
}

http protocol www {
        match request header append "X-Forwarded-For" value "$REMOTE_ADDR"
        match request header append "X-Forwarded-By" \
            value "$SERVER_ADDR:$SERVER_PORT"
        match request header set "Connection" value "close"
        
        block
        
        pass request header "Host" value "yonderly.org" \
                forward to <self>
        ...
        pass request header "Host" value "alpine0.yonderly.org" \
                forward to <self>
}

relay www {
        listen on $ext_ip port http
        protocol www

        forward to <self>       port 80
}

relay wwwtls {
        listen on $ext_ip port https tls
        protocol wwwtls

        forward to <self> port 8080
        forward to <alpine0> port 80
}