http:
  pprof:
    port: 6060
    enabled: false
  address: 0.0.0.0:19152 # use a port not used by anything else
  session_ttl: 720h

tls:
  enabled: true
  server_name: "yourdomain.name"
  force_https: false
  port_https: 0
  port_dns_over_tls: 853
  port_dns_over_quic: 853
  port_dnscrypt: 0
  dnscrypt_config_file: ""
  allow_unencrypted_doh: true
  certificate_chain: ""
  private_key: ""
  certificate_path: "/path/to/cert"
  private_key_path: "/path/to/key"
  strict_sni_check: false