feat: add HAProxy log ingestion server

- Introduced a new Rust-based service for ingesting HAProxy logs, including the necessary database schema and API endpoints.
- Implemented database interactions for managing source status, inserting events, and handling ingestion batches.
- Added validation for incoming log batches to ensure data integrity.
- Configured systemd service for the HAProxy ingestion server with appropriate security settings.
- Updated firewall rules to allow traffic on the ingestion server's port (8444).
- Created necessary PostgreSQL database and user configurations for the ingestion service.

systems/jeeves/networking/firewall.nix

@@ -6,6 +6,7 @@ let
     gitea_http = 6443;
     gitea_ssh = 2223;
     grafana = 3000;
+    haproxy_ingest = 8444;
     jellyfin_http = 8096;
     jellyswarrm = 3100;
     nix_binary_cache = 5000;
@@ -26,6 +27,7 @@ in
     interfaces.tailscale0.allowedTCPPorts = [
       ports.audiobookshelf
       ports.gems
+      ports.haproxy_ingest
       ports.jellyfin_http
       ports.jellyswarrm
       ports.nix_binary_cache