Make sure http-request always comes before the first redirect

templates/haproxy_cfg

@@ -68,7 +68,16 @@ frontend http_in
 {% for path in redirect.paths|default([]) %}
 {% if path.deny|default(false) %}
   http-request deny if { hdr(host) -i -n {{from}}{% if path.from is defined %} } { path_beg /{{path.from}}{% endif %} }
-{% else %}
+{% endif %}
+{% endfor %}
+{% endfor %}
+{% endfor %}
+{% endfor %}
+{% for host in groups['all'] %}
+{% for redirect in hostvars[host].proxy_redirect|default([]) %}
+{% for from in redirect.from %}
+{% for path in redirect.paths|default([]) %}
+{% if not path.deny|default(false) %}
   redirect location {{ redirect.protocol|default('https') }}://{{redirect.to}}/{{path.to|default('')}} code 301 if { hdr(host) -i -n {{from}}{% if path.from is defined %} } { path_beg /{{path.from}}{% endif %} }
 {% endif %}
 {% endfor %}
@@ -135,7 +144,16 @@ frontend https_in_{{ cert.ip }}
 {% for path in redirect.paths|default([]) %}
 {% if path.deny|default(false) %}
   http-request deny if { hdr(host) -i -n {{from}}{% if path.from is defined %} } { path_beg /{{path.from}}{% endif %} }
-{% else %}
+{% endif %}
+{% endfor %}
+{% endfor %}
+{% endfor %}
+{% endfor %}
+{% for host in groups['all'] %}
+{% for redirect in hostvars[host].proxy_redirect|default([]) %}
+{% for from in redirect.from %}
+{% for path in redirect.paths|default([]) %}
+{% if not path.deny|default(false) %}
   redirect location {{ redirect.protocol|default('https') }}://{{redirect.to}}/{{path.to|default('')}} code 301 if { hdr(host) -i -n {{from}}{% if path.from is defined %} } { path_beg /{{path.from}}{% endif %} }
 {% endif %}
 {% endfor %}