feat(k8s/infrastructure/traefik): configure TLS options

2026-03-16 00:40:11 +02:00
parent 68baf37627
commit 325d15a446
1 changed files with 15 additions and 0 deletions
--- a/kubernetes/infrastructure/controllers/traefik/tls-options.yaml
+++ b/kubernetes/infrastructure/controllers/traefik/tls-options.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: TLSOption
+metadata:
+  name: default
+  namespace: traefik
+spec:
+  minVersion: VersionTLS12
+  cipherSuites:
+    - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+    - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+    - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+    - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+    - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
+    - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256