foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nginx: use mozilla recommended ssl options

Browse source
This commit is contained in:
Timo Makinen 2019-07-05 10:20:25 +03:00
parent 6cd29b72a7
commit 9b3bfe9bc8
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
roles/nginx/server/templates/nginx.conf.j2
View file

@ -18,10 +18,12 @@ http {
access_log {{ nginx_logdir }}/access.log main;
ssl on;
ssl_session_cache builtin:1000 shared:SSL:10m;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m;
ssl_session_tickets off;
ssl_protocols {{ tls_protocols }};
ssl_ciphers {{ tls_ciphers }};
ssl_prefer_server_ciphers on;
ssl_prefer_server_ciphers off;
server {
listen 443 ssl http2;