foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

apache: Just use Mozilla recommended settings

Browse source 
Removed all RedHat default settings and just added Mozilla recommended
modern settings.
This commit is contained in:
Timo Makinen 2020-08-28 10:05:44 +00:00
parent affeddd2cc
commit bace8a39b4
2 changed files with 6 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/apache/templates/site.conf.j2
View file

@ -3,12 +3,7 @@
DocumentRoot /srv/web/{{ inventory_hostname }}
Protocols h2 http/1.1
SSLEngine on
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite {{ tls_ciphers }}
SSLHonorCipherOrder off
SSLSessionTickets off
# Server certificates
SSLCertificateKeyFile {{ tls_private }}/{{ inventory_hostname }}.key