[#59323898] CDN logs for transition

Configures rsyslog with a TCP input which logs to a single file. It presents
an SSL certificate to allow others to verify who the server is, but not to
verify who the clients are. Firewall does not restrict specific addresses -
that's done by the VSE.