tlsprovider

type Config struct {
	CertFile string
	KeyFile  string

	// controls how the fallback self-signed cert is generated
	// when the cert or key aren't provided
	SelfSigned SelfSignedOptions

	// defaults to tls.VersionTLS12 when zero.
	MinVersion uint16
}

type SelfSignedOptions struct {
	DNSNames []string
	IPs      []net.IP
	ValidFor time.Duration
}