feat: haproxy refactor

- configure deep merging in hiera
- move fe_http and fe_https to hiera
- configure pve backends for standard and api traffic

site/profiles/manifests/proxmox/weblb.pp

@@ -6,7 +6,7 @@ class profiles::proxmox::weblb {
 
   # export haproxy balancemember
   profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_${profiles::proxmox::params::pve_webport}}":
-    service => "be_${facts['country']}${facts['region']}pve",
+    service => "be_${facts['country']}${facts['region']}pve_web",
     ports   => [$profiles::proxmox::params::pve_webport],
     options => [
       "cookie ${facts['networking']['hostname']}",
@@ -18,4 +18,16 @@ class profiles::proxmox::weblb {
       'fall 2',
     ]
   }
+  profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_${profiles::proxmox::params::pve_webport}_api2}":
+    service => "be_${facts['country']}${facts['region']}pve_api",
+    ports   => [$profiles::proxmox::params::pve_webport],
+    options => [
+      'ssl',
+      'verify none',
+      'check',
+      'inter 2s',
+      'rise 3',
+      'fall 2',
+    ]
+  }
 }