Add default SSL server to ensure we only proxy our domains

Instead of the proxy SSL vhost config acting as a catch-all for all SSL
requests, this creates a catch-all default vhost that returns an error
instead if the server name does not match our expected domain names.