# Default pound.yaml
# vim:ft=yaml

Global:
  - User: "pound"
    Group: "pound"

Backends:
  - &be
    Address: 127.0.0.1
    Port: 8000

HTTPListeners:
  - Address: 0.0.0.0
    Port: 80
    Services:
      - Backends:
        - *be

HTTPSListeners:
  - Address: 0.0.0.0
    Port: 443
    Services:
      - Backends:
        - *be
    Certificates: "/etc/pki/pound.pem"
    Client: 60
    Ciphers:
      - TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384
      - TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA
      - TLS-DHE-RSA-WITH-AES-128-CBC-SHA
      - TLS-RSA-WITH-CAMELLIA-128-CBC-SHA
      - TLS-RSA-WITH-AES-128-CCM
      - TLS-RSA-WITH-AES-256-GCM-SHA384
      - TLS-RSA-WITH-RC4-128-MD5
      - TLS-RSA-WITH-3DES-EDE-CBC-SHA