Enforce mTLS on private-admin Traefik routes

core/traefik/dynamic.yml

@@ -31,3 +31,13 @@ http:
           - crowdsec@file
 #          - tracing-middleware@file
           - error-pages-middleware@docker
+
+tls:
+  options:
+    mtls-private-admin:
+      minVersion: VersionTLS12
+      sniStrict: true
+      clientAuth:
+        caFiles:
+          - /etc/traefik/certs/ca/clients-ca.crt
+        clientAuthType: RequireAndVerifyClientCert