TLS Config Generator
Production-ready nginx/Apache/HAProxy/Kubernetes TLS configurations.
Generates hardened TLS server configuration blocks for popular platforms using Mozilla-recommended cipher suites, protocol settings, OCSP stapling and HSTS. Choose intermediate compatibility (broad client support) or modern (TLS 1.3-focused).
Privacy: Configuration text is generated from your inputs and not stored.
Related tools
Frequently asked questions
Intermediate or modern profile?
Intermediate supports nearly every client released in the last ~5 years. Modern enables only TLS 1.3-era ciphers for the strongest posture but excludes older clients.