traefik/tls.yml

27 lines
623 B
YAML

http:
middlewares:
secureHeaders:
headers:
sslRedirect: true
forceSTSHeader: true
stsIncludeSubdomains: true
stsPreload: true
stsSeconds: 31536000
tls:
stores:
default:
defaultCertificate:
certFile: /tls/selfsigned.crt
keyFile: /tls/selfsigned.key
certificates:
- certFile: /tls/selfsigned.crt
keyFile: /tls/selfsigned.key
options:
default:
clientAuth:
# in PEM format. each file can contain multiple CAs.
caFiles:
- /tls/selfsigned.crt
clientAuthType: VerifyClientCertIfGiven