---
tls:
  certificate: /config/tls/cert.pem
  certificate-key: /config/tls/key.pem
  min-protocol-version: "TLSv1.2"
  ciphers:
  - ECDHE_RSA_WITH_AES_128_GCM_SHA256
  - ECDHE_RSA_WITH_AES_256_GCM_SHA384
  - ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
  - TLS_AES_128_GCM_SHA256
  - TLS_AES_256_GCM_SHA384
  - TLS_CHACHA20_POLY1305_SHA256
  prefer-server-ciphers: true