feat: add HAProxy log ingestion server

- Introduced a new Rust-based service for ingesting HAProxy logs, including the necessary database schema and API endpoints.
- Implemented database interactions for managing source status, inserting events, and handling ingestion batches.
- Added validation for incoming log batches to ensure data integrity.
- Configured systemd service for the HAProxy ingestion server with appropriate security settings.
- Updated firewall rules to allow traffic on the ingestion server's port (8444).
- Created necessary PostgreSQL database and user configurations for the ingestion service.

systems/jeeves/services/postgress.nix

@@ -36,6 +36,9 @@ in
       # signalbot
       local signalbot  signalbot   trust
 
+      # HAProxy cloud log ingestion API
+      local haproxy_ingest haproxy_ingest trust
+
       # math
       local postgres  math   trust
       host  postgres  math   127.0.0.1/32    trust
@@ -97,6 +100,13 @@ in
           replication = true;
         };
       }
+      {
+        name = "haproxy_ingest";
+        ensureDBOwnership = true;
+        ensureClauses = {
+          login = true;
+        };
+      }
       {
         name = "signalbot";
         ensureDBOwnership = true;
@@ -108,6 +118,7 @@ in
     ensureDatabases = [
       "data_science_dev"
       "gitea"
+      "haproxy_ingest"
       "math"
       "n8n"
       "richie"