diff --git a/examples/traefik/fileConfig.yml b/examples/traefik/fileConfig.yml
index 1bf5dc8..20c7021 100644
--- a/examples/traefik/fileConfig.yml
+++ b/examples/traefik/fileConfig.yml
@@ -108,6 +108,7 @@ http:
 tls:
   options:
     default:
+      sniStrict: true # prevents leaking default cert; see https://doc.traefik.io/traefik/v2.2/https/tls/#strict-sni-checking
       minVersion: VersionTLS12
       cipherSuites:
         - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256