traefik-values.yaml.example

rbac:
  enabled: true

# Credit to https://ssl-config.mozilla.org for the basis of this config
ssl:
  enabled: true
  tlsMinVersion: VersionTLS12
  cipherSuites: [
      "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
      "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"
    ]

# Unfortunately DNS was the only challenge type which I could get to work with basic auth turned on
# This will vary depending on your DNS provider
acme:
  enabled: true
  email: myemail@mydomain.com
  staging: false
  challengeType: tls-alpn-01