ishmael behind varnish, make neon a backend

- put ishmael.wikimedia.org behind misc. varnish

- in order to do that, make neon a varnish backend
  (even if neon has a public IP)

- delete the SSL part of the Apache config which
  is now not handled by Apache anymore, copy
  the setup from the :443 part over to :80

this runs on 'neon', which is also: icinga and tendril

Change-Id: I653e1b303d76f5e339281601b1b451e564720ac4
Merge "ishmael behind varnish, make neon a backend" into production