Https support

This requires /data/server-wide/haproxy/certs/default.pem to exist on the host system, so it makes getting started a bit harder (see README.md), would be nice to fix that actually. Maybe we can make the TLS part in the template optional somehow when we port it to a confd template?