diff --git a/templates/2.1/traefik-tls-options.yml.j2 b/templates/2.1/traefik-tls-options.yml.j2
index 533ff39..6f64045 100644
--- a/templates/2.1/traefik-tls-options.yml.j2
+++ b/templates/2.1/traefik-tls-options.yml.j2
@@ -11,5 +11,6 @@ spec:
     - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
     - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
     - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
-    - TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
-    - TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
+  curvePreferences:
+    - CurveP521
+    - CurveP384
\ No newline at end of file
diff --git a/templates/2.2/traefik-tls-options.yml.j2 b/templates/2.2/traefik-tls-options.yml.j2
index 533ff39..6f64045 100644
--- a/templates/2.2/traefik-tls-options.yml.j2
+++ b/templates/2.2/traefik-tls-options.yml.j2
@@ -11,5 +11,6 @@ spec:
     - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
     - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
     - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
-    - TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
-    - TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
+  curvePreferences:
+    - CurveP521
+    - CurveP384
\ No newline at end of file