Get HaProxy, multiple SSL domains and firewall work together

templates/vhost.conf

 <VirtualHost *:80>
   Include /etc/apache2/conf-available/global-redirect.conf
 
-{% if item.protocol|default("https") == "https" %}
+{% if item.protocol|default("https") == "https" and groups.proxyserver is not defined %}
   ServerAdmin {{ apache_server_admin }}
   ServerName  {{ item.domain }}
   ServerAlias {{ item.domain }}{% for alias in item.aliases|default([]) %} {{ alias }}{% endfor %}
@@ -78,7 +78,7 @@
 
   SetEnvIf X-Forwarded-Proto https HTTPS=on
 
-{% if item.protocol|default("https") == "https" %}
+{% if item.protocol|default("https") == "https" and groups.proxyserver is not defined %}
 {% if item.letsencrypt|default(true) %}
   SSLCertificateFile /etc/letsencrypt/live/{{ item.domain }}/cert.pem
   SSLCertificateKeyFile /etc/letsencrypt/live/{{ item.domain }}/privkey.pem