TLS settings in config file

[TheJJ]

One should be able to set TLS settings in the config, e.g. to disable some ciphers or TLS1.0 and 1.1.

[bsu3338]

What about a simple argument --secureciphers or something similar that just disables all current weak ciphers? Maybe just make a note in the documentation about increased CPU usage if option is enabled.

[TheJJ]

It shouldn't matter if this is configured on the command line or config file. Changing the commandline involves editing the systemd unit, so it should be preferred to use the config file.

[DerDanilo]

What about just putting nginx or haproxy (locally) in front of it? Should be simple enough and doesn't require a config change.