More HAProxy/TLS Configuration

* Move Fastly into it's own HAProxy frontend
  * Give it a really long timeout
* Different ciphers for HAProxy binds and servers
* Allow TLS sessions to be valid for ~2 hours
* Remove the super high time out on the backend servers
* Clean up the generated config file