1 # Uncomment this line in order to enable debugging through logs
3 defaultEntryPoints = ["http", "https"]
9 [entryPoints.https.tls]
10 MinVersion = "VersionTLS12"
16 PreferServerCipherSuites = true
18 "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
19 "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
20 "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
21 "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
22 "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
23 "TLS_RSA_WITH_AES_256_GCM_SHA384",
24 "TLS_RSA_WITH_AES_256_CBC_SHA"
26 FrameDeny = false # here we don't want to deny frames since we have an embed
27 STSIncludeSubdomains = true
28 STSSeconds = 315360000
30 ContentTypeNosniff = true
31 BrowserXssFilter = true
34 # Enable ACME (Let's Encrypt): automatic SSL.
37 # Email address used for registration.
41 email = "<MY EMAIL ADDRESS>"
43 # File or key used for certificates storage.
47 storage = "/etc/acme.json"
48 # or `storage = "traefik/acme/account"` if using KV store.
50 # Entrypoint to proxy acme apply certificates to.
51 # WARNING, if the TLS-SNI-01 challenge is used, it must point to an entrypoint on port 443
62 # Use a HTTP-01 acme challenge rather than TLS-SNI-01 challenge
64 # Optional but recommend
68 # EntryPoint to use for the challenges.