diff options
| author | jfederico <jesus@123it.ca> | 2021-12-20 14:32:07 -0500 |
|---|---|---|
| committer | jfederico <jesus@123it.ca> | 2021-12-20 14:32:07 -0500 |
| commit | 75472c7f7f36dcc17dda438a68f919366737fad4 (patch) | |
| tree | 7bd7f67c572b5b168156ae1c0147c6376c3eb75b | |
| parent | 422b7edb7fdc9e653d0d460e91f34a083be17dbf (diff) | |
| download | scalelite-run-itzks-75472c7f7f36dcc17dda438a68f919366737fad4.tar.gz scalelite-run-itzks-75472c7f7f36dcc17dda438a68f919366737fad4.tar.bz2 scalelite-run-itzks-75472c7f7f36dcc17dda438a68f919366737fad4.zip | |
| -rw-r--r-- | data/proxy/nginx/sites.template.scalelite-proxy | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/data/proxy/nginx/sites.template.scalelite-proxy b/data/proxy/nginx/sites.template.scalelite-proxy index f8e4ecf..c099bcb 100644 --- a/data/proxy/nginx/sites.template.scalelite-proxy +++ b/data/proxy/nginx/sites.template.scalelite-proxy @@ -26,8 +26,13 @@ server { server { server_name $NGINX_HOSTNAME; - listen 443 ssl; - listen [::]:443 ssl; + listen 443 ssl http2; + listen [::]:443 ssl http2; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; + ssl_prefer_server_ciphers on; + ssl_session_cache shared:SSL:10m; ## Configuration for Letsencrypt SSL Certificate ssl_certificate /etc/letsencrypt/live/$NGINX_HOSTNAME/fullchain.pem; |