TLS Config Generator

Production-ready nginx/Apache/HAProxy/Kubernetes TLS configurations.

Generates hardened TLS server configuration blocks for popular platforms using Mozilla-recommended cipher suites, protocol settings, OCSP stapling and HSTS. Choose intermediate compatibility (broad client support) or modern (TLS 1.3-focused).

Privacy: Configuration text is generated from your inputs and not stored.

Related tools

Frequently asked questions

Intermediate or modern profile?

Intermediate supports nearly every client released in the last ~5 years. Modern enables only TLS 1.3-era ciphers for the strongest posture but excludes older clients.