start haproxy for all roles (enabled with ip_nonlocal_bind)