Setup rsyslog to log haproxy

Also allow admin port to listen on all interfaces and add firewall rule to only
allow that port on OSL networks.

Additionally, update the TK cloud config.
It should also be tested here because we're assuming it happens. What happens when we switch away from the firewall cookbook, and someone forgets why it was even included in the first place?