HAproxy deny access to specific user-agent

Example: you don’t like a bot to poke around your webserver.

frontend www-https
 http-request deny if { req.hdr(user-agent) -m sub facebookexternalhit }

Done.

PS. this is single line configuration.