From 586de76245a32ed53958339fc1dc5a0cdb98a793 Mon Sep 17 00:00:00 2001
From: AnyCPU <AnyCPU@users.noreply.github.com>
Date: Sun, 15 Feb 2026 23:39:54 +0200
Subject: [PATCH] Set explicit TLS minimum version on HTTPS server

---
 internal/server/server.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/internal/server/server.go b/internal/server/server.go
index 4b336de3..8cef4e95 100644
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -159,6 +159,7 @@ func (s *Server) startHTTPServers() error {
 			handler.ServeHTTP(w, r)
 		}),
 		TLSConfig: &tls.Config{
+			MinVersion:     tls.VersionTLS12,
 			NextProtos:     []string{"h2", "http/1.1", acme.ALPNProto},
 			GetCertificate: s.router.GetCertificate,
 		},