24 lines
654 B
YAML
24 lines
654 B
YAML
# TLS Configuration
|
|
tls:
|
|
certificates:
|
|
# Cloudflare Origin CA *.forust.xyz
|
|
- certFile: /certs/cloudflare.pem
|
|
keyFile: /certs/cloudflare.key
|
|
- certFile: /certs/xdfnx.pem
|
|
keyFile: /certs/xdfnx.key
|
|
stores:
|
|
default:
|
|
defaultCertificate:
|
|
# Fallback local certificate
|
|
certFile: /certs/gigaforust.internal+1.pem
|
|
keyFile: /certs/gigaforust.internal+1-key.pem
|
|
|
|
options:
|
|
default:
|
|
minVersion: VersionTLS12
|
|
sniStrict: false
|
|
cipherSuites:
|
|
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
|
|
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
|
|
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
|