HAProxy and Let's encrypt renewal challenge fails

[nickh (Nick Howitt)]

I would do tcpdump -nni lo port 5001