diff --git a/lingress.go b/lingress.go
index 624c940..956fa99 100644
--- a/lingress.go
+++ b/lingress.go
@@ -208,6 +208,16 @@ func (this *Lingress) createTlsConfig() (*tls.Config, error) {
 	}
 
 	result := tls.Config{
+		MinVersion: tls.VersionTLS12,
+		CipherSuites: []uint16{
+			tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
+			tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+			tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
+			tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
+			tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
+			tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,
+			tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,
+		},
 		Certificates:   []tls.Certificate{},
 		GetCertificate: this.resolveCertificate,
 	}