TLS & HTTPS
Global · server
enum
proxy_min_tls_version
Minimum TLS version the proxy will negotiate with clients.
- Config key
proxy_min_tls_version- Scope
- Global · server
- Type
- enum
- Default
TLS_1_3
Sets the lowest TLS version a client may use. Accepted values are TLS_1_0, TLS_1_1, TLS_1_2 and TLS_1_3. An invalid value is rejected at startup.
🛡️Recommendation
Keep this at
TLS_1_3, or TLS_1_2 if you still serve older enterprise clients. TLS 1.0/1.1 are deprecated and should only ever be a temporary compatibility measure.proxy_min_tls_version = "TLS_1_3"