use ciphersuits per SSLlabs and BSI recommendations

upgrade traefik to 2.4.9
2021-08-02 14:57:21 +02:00 · 2021-08-02 14:56:45 +02:00
2 changed files with 5 additions and 7 deletions
--- a/config/dynamic/tls.yml
+++ b/config/dynamic/tls.yml
@ -3,9 +3,7 @@ tls:
    default:
      minVersion: VersionTLS12
      cipherSuites:
-        - TLS_CHACHA20_POLY1305_SHA256
-        - TLS_AES_128_GCM_SHA256
-        - TLS_AES_256_GCM_SHA384
-        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
-        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
-        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+      - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+      - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+      - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+      - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
--- a/docker-compose.yml
+++ b/docker-compose.yml
@ -2,7 +2,7 @@ version: '2'

 services:
  proxy:
-    image: traefik:v2.3
+    image: traefik:v2.4.9
    ports:
      - "80:80"
      - "443:443"
Author	SHA1	Message	Date
Linuro	a33c5f3088	use ciphersuits per SSLlabs and BSI recommendations	2021-08-02 14:57:21 +02:00
Linuro	11d5214a9d	upgrade traefik to 2.4.9	2021-08-02 14:56:45 +02:00