Fix TLS config

helpers.go

@@ -57,6 +57,11 @@ func parseConsulService(entries []*api.ServiceEntry) (upstreams []*reverseproxy.
 
 	for _, entry := range entries {
 
+		// We add the instance as an upstream
+		upstreams = append(upstreams, &reverseproxy.Upstream{
+			Dial: fmt.Sprintf("%s:%d", entry.Service.Address, entry.Service.Port),
+		})
+
 		// We check the options on that instance
 		for i := 0; i < t.NumField(); i++ {
 
@@ -87,22 +92,13 @@ func parseConsulService(entries []*api.ServiceEntry) (upstreams []*reverseproxy.
 						}
 						fieldValue.SetInt(val)
 					}
+
 				}
 
 			}
 
 		}
 
-		scheme := "http"
-		if options.UpstreamScheme != "" {
-			scheme = options.UpstreamScheme
-		}
-
-		// We add the instance as an upstream
-		upstreams = append(upstreams, &reverseproxy.Upstream{
-			Dial: fmt.Sprintf("%s://%s:%d", scheme, entry.Service.Address, entry.Service.Port),
-		})
-
 	}
 
 	return

jsonconf.go

@@ -124,6 +124,16 @@ func (cc *App) generateHTTPAndTLSAppConfFromConsulServices(conf *caddy.Config) (
 			},
 		}
 
+		// If Upstream is HTTPS, then we use HTTPTransport and add the TLS tag (insecure)
+		if options.UpstreamScheme == "https" {
+			transport := reverseproxy.HTTPTransport{
+				TLS: &reverseproxy.TLSConfig{
+					InsecureSkipVerify: true,
+				},
+			}
+			reverseProxyHandler.TransportRaw = caddyconfig.JSON(transport, nil)
+		}
+
 		// Do we propagate upstream headers?
 		if options.UpstreamHeaders {
 			reverseProxyHandler.Headers.Response.Add = http.Header{