Setup rsyslog to log haproxy

Also allow admin port to listen on all interfaces and add firewall rule to only
allow that port on OSL networks.

Additionally, update the TK cloud config.
Is there a reason that you're binding to `0.0.0.0` if only localhost needs access? Seems like `127.0.0.1` would be safer.