traefik/tls.yml
2023-12-05 11:41:04 +01:00

29 lines
732 B
YAML

http:
middlewares:
secureHeaders:
headers:
sslRedirect: true
forceSTSHeader: true
stsIncludeSubdomains: true
stsPreload: true
stsSeconds: 31536000
tls:
stores:
default:
defaultCertificate:
certFile: /tls/CF-altogether.at.crt
keyFile: /tls/CF-altogether.at.key
certificates:
- certFile: /tls/CF-altogether.at.crt
keyFile: /tls/CF-altogether.at.key
- certFile: /tls/wordpress.localhost.crt
keyFile: /tls/wordpress.localhost.key
options:
default:
clientAuth:
# in PEM format. each file can contain multiple CAs.
caFiles:
- /tls/server.crt
clientAuthType: VerifyClientCertIfGiven