More documentation on setting up TLS
I would love some more information on setting up the TLS on Haproxy.

I have installed Haproxy and put in the correct settings however I am getting the following:

```
[Ipofmyproxyserver:8080] Error: "Connection refused"
```

It could be that I have not installed the certificate correctly or I may have the incorrect settings in the config files.

This is what my Haproxy config file looks like:

```
global
        log /dev/log    local0
        log /dev/log    local1 notice
        chroot /var/lib/haproxy
        stats socket /run/haproxy/admin.sock mode 660 level admin
        stats timeout 30s
        user haproxy
        group haproxy
        daemon
        maxconn 20000

        # Default SSL material locations
        ca-base /etc/ssl/certs
        crt-base /etc/ssl/private

        # Default ciphers to use on SSL-enabled listening sockets.
        # For more information, see ciphers(1SSL). This list is from:
        #  https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
        ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
        ssl-default-bind-options no-sslv3
        tune.ssl.default-dh-param 2048

defaults
        log     global
        option  dontlognull
        timeout connect 5000

frontend xmrig_xmr
        bind 0.0.0.0:8080 name https ssl crt /etc/ssl/mycert.pem
        mode tcp
        option tcplog
        default_backend xmrig_backend_xmr
        timeout client  10m
        timeout server  10m

backend xmrig_backend_xmr
        mode tcp
        server proxy 127.0.0.1:443 check
```

This is what my XMRIG-PROXY config.json looks like

```
{
    "algo": "cryptonight",
    "background": false,
    "colors": true,
    "retries": 5,
    "retry-pause": 5,
    "donate-level": 2,
    "syslog": false,
    "log-file": null,
    "access-log-file": null,
    "verbose": false,
    "pools": [
        {
            "url": "xmr-eu.dwarfpool.com:8050",
            "user": "**MYWALLET**",
            "pass": "**MYEMAIL**",
            "variant": -1
        }
    ],
    "bind": [
        "0.0.0.0:443"
    ],
    "api": {
        "port": 0,
        "access-token": null,
        "worker-id": null
    }
}
```

and this is what my xmrigCC Daemon config.json looks like. I am using this miner as it has TLS enabled.

```
{
    "algo": "cryptonight",                      // cryptonight (default), cryptonight-lite, cryptonight-lite-ipbc or cryptopnight-heavy
    "av": null,                                 // DEPRECATED: algorithm variation, (0 auto,
                                                //                                   1 -> (aesni=1, multihash-factor=1),
                                                //                                   2 -> (aesni=1, multihash-factor=2),
                                                //                                   3 -> (aesni=2, multihash-factor=1),
                                                //                                   4 -> (aesni=2, multihash-factor=2))
    "aesni": 0,                                 // selection of AES-NI mode (0 auto, 1 on, 2 off)
    "threads": 19,                              // number of miner threads (not set or 0 enables automatic selection of optimal thread count)
    "multihash-factor": 0,                      // number of hash blocks to process at a time (not set or 0 enables automatic selection of optimal number of hash blocks)
    "multihash-thread-mask" : null,             // for multihash-factors>0 only, limits multihash to given threads (mask), mask "0x3" means run multihash on thread 0 and 1 only (default: all threads)
    "force-pow-version" : 0,                    // force to use specific PoW variation (default: 0 POW_AUTODETECT, 1 POW_V1, 2 POW_V2)
    "background": false,                        // true to run the miner in the background (Windows only, for *nix plase use screen/tmux or systemd service instead)
    "colors": true,                             // false to disable colored output
    "cpu-affinity": null,                       // set process affinity to CPU core(s), mask "0x3" for cores 0 and 1
    "cpu-priority": null,                       // set process priority (0 idle, 2 normal to 5 highest)
    "donate-level": 5,                          // donate level, mininum 1%
    "log-file": null,                           // log all output to a file, example: "c:/some/path/xmrig.log"
    "max-cpu-usage": 85,                        // maximum CPU usage for automatic mode, usually limiting factor is CPU cache not this option.
    "print-time": 60,                           // print hashrate report every N seconds
    "retries": 20,                              // number of times to retry before switch to backup server
    "retry-pause": 5,                           // time to pause between retries
    "safe": true,                               // true to safe adjust threads and av settings for current CPU
    "syslog": false,                            // use system log for output messages
    "pools": [
        {
            "url": "Ipofmyproxyserver:8080",         // URL of mining server
            "user": "**MYWALLET**",                         // username for mining server
            "pass": "**MYEMAIL**",    // password for mining server
            "use-tls" : true,                   // enable tls for pool communication (need pool support)
            "keepalive": true,                  // send keepalived for prevent timeout (need pool support)
            "nicehash": true,                   // enable nicehash/xmrig-proxy support
        }
    ],
    "api": {
        "port": 0,                              // port for the miner API https://github.com/xmrig/xmrig/wiki/API
        "access-token": null,                   // access token for API
        "worker-id": null                       // custom worker-id for API
    },
    "cc-client": {
        "url": "localhost:3344",                // url of the CC Server (ip:port)
        "use-tls" : true,                      // enable tls for CC communication (needs to be enabled on CC Server too)
        "access-token": "mySecret",             // access token for CC Server (has to be the same in config_cc.json)
        "worker-id": null,                      // custom worker-id for CC Server (otherwise hostname is used)
        "update-interval-s": 10                 // status update interval in seconds (default: 10 min: 1)
    }
}
```