From c4bc0c2e564c565a1aa821505d3da3069526fe66 Mon Sep 17 00:00:00 2001
From: Harsh Shandilya <me@msfjarvis.dev>
Date: Sun, 29 Mar 2020 12:41:31 +0530
Subject: [PATCH] Caddyfile: Disable TLS 1.0/1.1

SSL Labs has started capping grades to B for servers that support TLS 1.0 and/or TLS 1.1
so I believe this is finally the time to get rid of these protocols

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
---
 Caddyfile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Caddyfile b/Caddyfile
index 67bd118..5e7e67d 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -6,6 +6,7 @@
   tls {
     dns cloudflare
     clients /etc/ssl/caddy/cloudflare-origin-pull-ca.pem
+    protocols tls1.2
   }
   header / {
     Content-Security-Policy "