diff --git a/net/haproxy/Makefile b/net/haproxy/Makefile
index ef7fe1125..2ed4ea9f8 100644
--- a/net/haproxy/Makefile
+++ b/net/haproxy/Makefile
@@ -1,5 +1,5 @@
 PLUGIN_NAME=		haproxy
-PLUGIN_VERSION=		2.19
+PLUGIN_VERSION=		2.20
 PLUGIN_COMMENT=		Reliable, high performance TCP/HTTP load balancer
 PLUGIN_DEPENDS=		haproxy
 PLUGIN_MAINTAINER=	opnsense@moov.de
diff --git a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
index 101cbd743..ba7585640 100644
--- a/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
+++ b/net/haproxy/src/opnsense/service/templates/OPNsense/HAProxy/haproxy.conf
@@ -793,9 +793,9 @@ global
     chroot                      /var/haproxy
     daemon
 {% if helpers.exists('OPNsense.HAProxy.general.seamlessReload') and OPNsense.HAProxy.general.seamlessReload|default("0") == "1" %}
-    stats                       socket /var/run/haproxy.socket level admin expose-fd listeners
+    stats                       socket /var/run/haproxy.socket group proxy mode 775 level admin expose-fd listeners
 {% else %}
-    stats                       socket /var/run/haproxy.socket level admin
+    stats                       socket /var/run/haproxy.socket group proxy mode 775 level admin
 {% endif %}
     nbproc                      {{OPNsense.HAProxy.general.tuning.nbproc}}
 {% if OPNsense.HAProxy.general.tuning.nbthread|default('') != '' %}