I think this should be a first pass for an haproxy config.

Still needs the HTTPS proxy frontend.