add tls profile config

app.go

@@ -57,6 +57,7 @@ type App struct {
 	gracefulShutdown *gracefulShutdown
 
 	certFile, keyFile string
+	tlsProfile        string
 }
 
 var (
@@ -110,6 +111,17 @@ func (app *App) configServer() {
 	app.srv.ConnState = app.ConnState
 	app.srv.ErrorLog = app.ErrorLog
 	app.srv.Handler = app
+
+	if app.srv.TLSConfig == nil {
+		switch app.tlsProfile {
+		case "restricted":
+			app.srv.TLSConfig = &Restricted
+		case "modern":
+			app.srv.TLSConfig = &Modern
+		case "compatible":
+			app.srv.TLSConfig = &Compatible
+		}
+	}
 }
 
 func (app *App) listenAndServe() error {

config.go

@@ -2,6 +2,7 @@ package hime
 
 import (
 	"io/ioutil"
+	"strings"
 	"time"
 
 	yaml "gopkg.in/yaml.v2"
@@ -22,8 +23,9 @@ type AppConfig struct {
 			Timeout string `yaml:"timeout" json:"timeout"`
 			Wait    string `yaml:"wait" json:"wait"`
 		} `yaml:"gracefulShutdown" json:"gracefulShutdown"`
-		CertFile string `yaml:"certFile" json:"certFile"`
-		KeyFile  string `yaml:"keyFile" json:"keyFile"`
+		CertFile   string `yaml:"certFile" json:"certFile"`
+		KeyFile    string `yaml:"keyFile" json:"keyFile"`
+		TLSProfile string `yaml:"tlsProfile" json:"tlsProfile"`
 	} `yaml:"server" json:"server"`
 }
 
@@ -91,6 +93,9 @@ func (app *App) Config(config AppConfig) *App {
 	if config.Server.KeyFile != "" {
 		app.keyFile = config.Server.KeyFile
 	}
+	if config.Server.TLSProfile != "" {
+		app.tlsProfile = strings.ToLower(config.Server.TLSProfile)
+	}
 
 	// load graceful config
 	if config.Server.GracefulShutdown != nil {