Refresh Apache vhost from Puppet upstream, tighten SSL protocols