diff --git a/hosts/proxy/default.nix b/hosts/proxy/default.nix
index 16f428a..9032a43 100644
--- a/hosts/proxy/default.nix
+++ b/hosts/proxy/default.nix
@@ -109,11 +109,10 @@
         enable = true;
         config = ''
           global
-            log /dev/log local0
-            maxconn 4096
-            # for ACME/Let's Encrypt cert + key in one file:
+            log /dev/log format raw local0
+            maxconn 50000
             stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners
-            crt-base /var/lib/acme
+            tune.bufsize 32762
 
           defaults
             log global