Update PROXY.md

This makes two changes to the HAProxy documentation:

1) Replaces the `reqadd` statements with `http-request set-header` statements, including a dynamic `X-Forwarded-Host`. Rationale is that this is  cleaner (no manual adding of domain), and extensible to a multi-domain environment. Note that I have NOT tested the `:[port]` trick on this form of the command since I run on port 443.

2) Moves the `redirect scheme` from the backend to the frontend. I disagree with the logic of the commit (002275468a) that moved this to the backend - in a multi-backend environment, putting it in the frontend is cleaner, and in this simple config it makes no functional difference.

documentation/PROXY.md

@@ -131,10 +131,12 @@ frontend https
     bind :80
     bind :443 ssl crt /etc/haproxy/certs/cert_key.pem
     
-    # Add X-Headers necessary for HTTPS
+    # Add X-Headers necessary for HTTPS; include :[port] if not running on port 443
-    # Replace frontend.example.com with your SSL host and include :[port] if not running on port 443
+    http-request set-header X-Forwarded-Host %[req.hdr(Host)]
-    reqadd X-Forwarded-Host:\ frontend.example.com
+    http-request set-header X-Forwarded-Proto https
-    reqadd X-Forwarded-Proto:\ https
+
+    # (OPTIONAL) Force HTTPS
+    redirect scheme https if !{ ssl_fc }
 
     # Bind URL with the right backend
     acl is_libresonic  path_beg -i /libresonic
@@ -146,9 +148,6 @@ backend libresonic-backend
     # proxy_redirect directive.
     http-response replace-value Location ^http://(.*)$ https://\1
 
-    # (OPTIONAL) Force HTTPS
-    redirect scheme https if !{ ssl_fc }
-
     # Forward requests to Libresonic running on localhost on port 4040
     server libresonic 127.0.0.1:4040 check
 ```