# TLS Configuration
tls:
  certificates:
    # Cloudflare Origin CA *.forust.xyz
    - certFile: /certs/cloudflare.pem
      keyFile: /certs/cloudflare.key
    # Local certificate
    - certFile: /certs/workstation+1.pem
      keyFile: /certs/workstation+1-key.pem
  
  stores:
    default:
      defaultCertificate:
        # Fallback local certificate
        certFile: /certs/workstation+1.pem
        keyFile: /certs/workstation+1-key.pem
  
  options:
    default:
      minVersion: VersionTLS12
      sniStrict: true
      cipherSuites:
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305