michael/IaC
1
0
Fork 0
Code Packages Activity

certbot and nginx working

Browse Source
This commit is contained in:
michael
2024-04-22 01:37:46 +12:00
parent 3d9241b475
commit c05f3a845b
12 changed files with 225 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
ansible/roles/nginx/files/ssl.conf Normal file
View File

@ -0,0 +1,7 @@
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:1m;
ssl_session_tickets off;
ssl_dhparam ssl/dhparams.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
ssl_prefer_server_ciphers off;