correct /haproxy-override path
automate SNI setup a bit further (seems to work so far