diff options
| author | Florian Dold <florian.dold@gmail.com> | 2016-04-22 01:37:37 +0200 |
|---|---|---|
| committer | Florian Dold <florian.dold@gmail.com> | 2016-04-22 01:37:37 +0200 |
| commit | feab32bb99caf360129e46f5e4b4e6f3f3c8538c (patch) | |
| tree | 09fc2bc9d47fc1bfa3938d8b6d3405a60da836a8 /etc/nginx/conf.d/talerssl | |
| parent | 52f21cabadc21d03a81d1e6f2d941b5c09fa3726 (diff) | |
| download | deployment-feab32bb99caf360129e46f5e4b4e6f3f3c8538c.tar.gz deployment-feab32bb99caf360129e46f5e4b4e6f3f3c8538c.tar.bz2 deployment-feab32bb99caf360129e46f5e4b4e6f3f3c8538c.zip | |
python shop
Diffstat (limited to 'etc/nginx/conf.d/talerssl')
| -rw-r--r-- | etc/nginx/conf.d/talerssl | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/etc/nginx/conf.d/talerssl b/etc/nginx/conf.d/talerssl new file mode 100644 index 0000000..3deae2c --- /dev/null +++ b/etc/nginx/conf.d/talerssl @@ -0,0 +1,9 @@ +ssl_certificate /etc/letsencrypt/live/taler.net/fullchain.pem; +ssl_certificate_key /etc/letsencrypt/live/taler.net/privkey.pem; +ssl_prefer_server_ciphers on; +ssl_session_cache shared:SSL:10m; +ssl_dhparam /etc/ssl/certs/dhparam.pem; +ssl_protocols TLSv1.2 TLSv1.1 TLSv1; +ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; + +add_header Strict-Transport-Security "max-age=63072000; preload"; |