dynamicproxy: Allow proxies to be https only
Doesn't actually switch over any proxy, only allows the
functionality to be turned on.
Set HSTS with one day expiry, match production as and
when they increase.
Also remove the @notfound servers functionality - was
fallback for back in the day when Apache was still used