348 	cfg:apply({

   348 	cfg:apply({

   349 		mode = mode,

   349 		mode = mode,

   350 		-- We can't read the password interactively when daemonized

   350 		-- We can't read the password interactively when daemonized

   351 		password = function() log("error", "Encrypted certificate for %s requires 'ssl' 'password' to be set in config", host); end;

   351 		password = function() log("error", "Encrypted certificate for %s requires 'ssl' 'password' to be set in config", host); end;

   352 	});

   352 	});

   354 	local preset = configmanager.get("*", "tls_preset") or "intermediate";

   353 	local preset = configmanager.get("*", "tls_preset") or "intermediate";

   355 	if preset ~= "legacy" then

   354 	if preset ~= "legacy" then

   356 		cfg:apply(mozilla_ssl_configs[preset]);

   355 		cfg:apply(mozilla_ssl_configs[preset]);

   357 	end

   356 	end

   358 

   358 

   359 	for i = select('#', ...), 1, -1 do

   359 	for i = select('#', ...), 1, -1 do

   360 		cfg:apply(select(i, ...));

   360 		cfg:apply(select(i, ...));

   361 	end

   361 	end

   362 	local user_ssl_config = cfg:final();

   362 	local user_ssl_config = cfg:final();