Shouldn't the whole smart proxy section move up into the constraints block further up these files?  It would also fix http://projects.theforeman.org/issues/3524 then.