defensive Vagrantfile + sample haproxy.config