Add details for forced ssl reverse proxy

No backend encryption, for localhost/secure nets only