use tcp mode for nifi and elastic

roles/build/files/haproxy-entrypoint.sh

+#!/bin/sh
+set -e
+
+# first arg is `-f` or `--some-option`
+if [ "${1#-}" != "$1" ]; then
+	set -- haproxy "$@"
+fi
+
+if [ "$1" = 'haproxy' ]; then
+	shift # "haproxy"
+	# if the user wants "haproxy", let's add a couple useful flags
+	#   -W  -- "master-worker mode" (similar to the old "haproxy-systemd-wrapper"; allows for reload via "SIGUSR2")
+	#   -db -- disables background mode
+	set -- haproxy -W -db "$@"
+fi
+
+exec "$@"

roles/haproxy/templates/haproxy.cfg.j2

@@ -21,7 +21,7 @@ listen stats
 
 listen nifiserv
 	bind *:9443
-	mode http
+	mode tcp
 	maxconn 5000
 	fullconn 5000
 	balance source
@@ -32,7 +32,7 @@ listen nifiserv
 
 listen odfeserv
         bind *:9200
-        mode http
+        mode tcp
         maxconn 5000
         fullconn 5000
         balance source