Move all services to internal interface

This patch moves all API services to the internal
interface, and leaves HAProxy as the sole service binding
on the public interface. This prevents clients from accessing
individual services not via the load balancer.

Addresses #30