[server.tls] enable = true implicit = true timeout = "1m" certificate = "default" ignore-client-order = true [certificate."default"] cert = "file:///etc/fullchain.pem" private-key = "file:///etc/privkey.pem"