diff --git a/templates/haproxy_cfg b/templates/haproxy_cfg
index f0a4a62211275c0c2db134d0569d24b1971c9639..e6d6602e00e0dfc3fda05e894dcd9f25ab245243 100644
--- a/templates/haproxy_cfg
+++ b/templates/haproxy_cfg
@@ -120,6 +120,8 @@ frontend http_in
 {% if routing is defined and routing.default is defined %}
   http-request set-header x-routing-host {{ routing.default }} if { hdr(x-routing-host) undefined } { hdr(host) -i -n {{ routing.domain }} }
 {% endif %}
+  acl letsencrypt_challenge path_beg /.well-known/acme-challenge/
+  use_backend backend_letsencrypt if letsencrypt_challenge
 {% if kibana_users is defined %}
   acl kibana_present hdr(host) -i -n '{{ kibana_domain|default(inventory_hostname) }}'
   use_backend backend_redirect_ssl if kibana_present
@@ -341,6 +343,9 @@ backend backend_redirect_ssl
 
 backend backend_redirect
   redirect scheme http if TRUE
+
+backend backend_letsencrypt
+  server letsencrypt 127.0.0.1:54321
 {% if kibana_users is defined %}
 
 backend backend_kibana