upate main config defaults

templates/haproxy_head.erb

@@ -13,13 +13,14 @@ global
     daemon
 
 <% if @hy_show_stats == true -%>
-  listen stats
-    bind *:8080
-    stats enable
-    stats uri /stats
-    stats auth joe:brown:P@sS
+    # turn on stats unix socket
+    stats socket /var/lib/haproxy/stats
 <% end -%>
 
+# utilize system-wide crypto-policies
+    ssl-default-bind-ciphers PROFILE=SYSTEM
+    ssl-default-server-ciphers PROFILE=SYSTEM
+
 defaults
     mode                    <%= @hy_default_mode %>
     log                     global