# TLS Configuration
tls:
  certificates:
    # Cloudflare Origin CA *.forust.xyz
    # - certFile: /certs/cloudflare.pem
    #   keyFile: /certs/cloudflare.key
  # stores:
  #   default:
  #     defaultCertificate:
  #       # Fallback local certificate
  #       certFile: /certs/local.pem
  #       keyFile: /certs/local-key.pem

  options:
    default:
      minVersion: VersionTLS12
      sniStrict: false
      cipherSuites:
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305