proxy/ssl: completely redo ssl config for foreman and proxy

This requires manual fixes in the foreman db/settings