Added sample haproxy listener

This may require ACL check on the incoming port to ensure that the correct SSL certificate for the Alias is served via SNI.