Update fileConfig.yml

add sni strict option
This commit is contained in:
LRVT 2024-03-19 12:54:58 +01:00 committed by GitHub
parent 37808b379a
commit aebb34e57e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -108,6 +108,7 @@ http:
tls: tls:
options: options:
default: default:
sniStrict: true # prevents leaking default cert; see https://doc.traefik.io/traefik/v2.2/https/tls/#strict-sni-checking
minVersion: VersionTLS12 minVersion: VersionTLS12
cipherSuites: cipherSuites:
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256