front proxy supports h2 and min tls1.2

kahgeh · Sep 28, 2020 · 8d07d49 · 8d07d49
1 parent ccbe541
commit 8d07d49
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/aws/front-proxy/envoy-template.py b/aws/front-proxy/envoy-template.py
@@ -83,7 +83,9 @@
                 filename: "/etc/letsencrypt/live/{{DOMAIN_NAME}}/fullchain.pem"
               private_key:
                 filename: "/etc/letsencrypt/live/{{DOMAIN_NAME}}/privkey.pem"
-
+            alpn_protocols: ["h2,http/1.1"]
+            tls_params:
+              tls_minimum_protocol_version: TLSv1_2
   clusters:
     - connect_timeout: 1s
       type: STATIC