One idea - the `foreman_ssl_* ` variables could default to `ssl_*` variables when not set. In case when foreman and smart-proxy are on the same host (typical small deployment setups) this could work "out-of-box" without uncommenting those lines. Just an idea, opinions?