Actually version the ingress haproxy config

ansible/roles/ingress/tasks/haproxy.yml

@@ -0,0 +1,20 @@
+- name: Install Haproxy
+  package:
+    name: haproxy
+  become: true
+
+- name: Haproxy config
+  template:
+    src: files/haproxy.cfg
+    dest: /etc/haproxy/haproxy.cfg
+    validate: /usr/sbin/haproxy -c -- %s
+    mode: "0644"
+    backup: yes
+  become: true
+  notify: restart haproxy
+
+- name: Enable Haproxy
+  service:
+    name: haproxy
+    enabled: true
+  become: true

ansible/roles/ingress/tasks/main.yml

@@ -1,2 +1,5 @@
 - name: Configure wireguard
   include: wireguard.yml
+
+- name: Configure haproxy
+  include: haproxy.yml