# Traefik Dynamic TLS Configuration
# This file configures TLS options and certificates

# TLS Options
tls:
  options:
    default:
      minVersion: VersionTLS12
      cipherSuites:
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
      sniStrict: false

# Self-signed certificate stores (for development)
# In production, use Let's Encrypt via certificatesResolvers in traefik.yml