tls:
  stores:
    default:
      defaultCertificate:
        certFile: /certs/star_example.org/fullchain.cer
        keyFile: /certs/star_example.org/star_example.org.key
  certificates:
    - certFile: /certs/star_example.org/fullchain.cer
      keyFile: /certs/star_example.org/star_example.org.key
       
      stores:
        - default
  options:
    default:
      minVersion: VersionTLS12
      alpnProtocols:
        - http/1.1
        - h2
      preferServerCipherSuites: true
      cipherSuites:
        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256