From 7f8af6177ab08abcdf875629c009dcae0e523ea3 Mon Sep 17 00:00:00 2001
From: Rich Turner <7072278+richturner@users.noreply.github.com>
Date: Tue, 19 May 2026 09:44:06 +0100
Subject: [PATCH 1/2] Move back to the LTS 2.8 version for more recent updates

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 59f9441..a99dcad 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,7 +3,7 @@
 # HAProxy image with certbot for certificate generation and renewal
 #
 # -----------------------------------------------------------------------------------------------
-FROM haproxy:2.9-alpine
+FROM haproxy:2.8-alpine
 LABEL maintainer="support@openremote.io"
 
 USER root

From d89d92e5965647c02aedd4eb4584deb814285b83 Mon Sep 17 00:00:00 2001
From: Rich Turner <7072278+richturner@users.noreply.github.com>
Date: Tue, 19 May 2026 22:29:43 +0100
Subject: [PATCH 2/2] Closes #15

---
 Dockerfile  | 2 +-
 haproxy.cfg | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a99dcad..24e9d96 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,7 +3,7 @@
 # HAProxy image with certbot for certificate generation and renewal
 #
 # -----------------------------------------------------------------------------------------------
-FROM haproxy:2.8-alpine
+FROM haproxy:3.2-alpine
 LABEL maintainer="support@openremote.io"
 
 USER root
diff --git a/haproxy.cfg b/haproxy.cfg
index d415862..11f21a8 100644
--- a/haproxy.cfg
+++ b/haproxy.cfg
@@ -128,7 +128,7 @@ listen mqtt
 
     .if defined(MQTT_RATE_LIMIT)
        # Rate limiting
-       acl too_fast fe_sess_rate ge "${MQTT_RATE_LIMIT}"
+       acl too_fast fe_sess_rate ge "${MQTT_RATE_LIMIT-0}"
        tcp-request connection reject if too_fast
     .endif