Enable 'option forwardfor' by default

Related: PROD-30813
Related: PROD-30814

Change-Id: I3e71cc72001ad038bb558e2953f1cc4603c30e30
diff --git a/haproxy/map.jinja b/haproxy/map.jinja
index 4167a2f..5443c1e 100644
--- a/haproxy/map.jinja
+++ b/haproxy/map.jinja
@@ -38,13 +38,21 @@
         'pkgs': ['haproxy'],
         'service': 'haproxy',
         'stats_socket': stats_socket_default,
-        'global': global_parameters
+        'global': global_parameters,
+        'forwardfor': {
+            'enabled': true,
+            'except': '127.0.0.1',
+        },
     },
     'RedHat': {
         'pkgs': ['haproxy'],
         'service': 'haproxy',
         'stats_socket': stats_socket_default,
-        'global': global_parameters
+        'global': global_parameters,
+        'forwardfor': {
+            'enabled': true,
+            'except': '127.0.0.1',
+        },
     },
 }, merge=salt['pillar.get']('haproxy:proxy')) %}