r/jellyfin: Add virtual host for HAProxy

Expose a virtual host on a separate TCP port that uses the PROXY
protocol.  This way, HAProxy can pass the original client IP address to
Jellyfin without terminating the TLS connection.

roles/jellyfin/tasks/httpd-proxy.yml

@@ -17,3 +17,12 @@
     persistent: true
   tags:
   - selinux
+
+- name: ensure jellyfin http proxy port is allowed in firewall
+  firewalld:
+    port: 8443/tcp
+    state: enabled
+    immediate: true
+    permanent: true
+  tags:
+  - firewalld