diff options
| author | Christian Grothoff <christian@grothoff.org> | 2016-08-08 16:05:10 +0200 |
|---|---|---|
| committer | Christian Grothoff <christian@grothoff.org> | 2016-08-08 16:05:10 +0200 |
| commit | 280733bd93af564f84c3bb7bc045d00a5af25588 (patch) | |
| tree | 0d01a9cec9706007252c9b62fcee60d8408fd08d /etc/nginx/sites-enabled/decentralise-ssl.site | |
| parent | e4ac947e23cf2d1ce4a4e280ec9f89d6a098b99a (diff) | |
| download | deployment-280733bd93af564f84c3bb7bc045d00a5af25588.tar.gz deployment-280733bd93af564f84c3bb7bc045d00a5af25588.tar.bz2 deployment-280733bd93af564f84c3bb7bc045d00a5af25588.zip | |
use inline TLS config everywhere, enable includeSubDomains directive
Diffstat (limited to 'etc/nginx/sites-enabled/decentralise-ssl.site')
| -rw-r--r-- | etc/nginx/sites-enabled/decentralise-ssl.site | 10 |
1 files changed, 1 insertions, 9 deletions
diff --git a/etc/nginx/sites-enabled/decentralise-ssl.site b/etc/nginx/sites-enabled/decentralise-ssl.site index 866107f..9dd0470 100644 --- a/etc/nginx/sites-enabled/decentralise-ssl.site +++ b/etc/nginx/sites-enabled/decentralise-ssl.site @@ -8,15 +8,7 @@ server { # Make site accessible from http://localhost/ server_name www.decentralise.rennes.inria.fr; server_name decentralise.rennes.inria.fr; - ssl_certificate /etc/letsencrypt/live/taler.net/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/taler.net/privkey.pem; - ssl_prefer_server_ciphers on; - ssl_session_cache shared:SSL:10m; - ssl_dhparam /etc/ssl/certs/dhparam.pem; - ssl_protocols TLSv1.2 TLSv1.1 TLSv1; - ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; - - add_header Strict-Transport-Security "max-age=63072000; preload"; + include conf.d/talerssl; rewrite / http://www.inria.fr/en/teams/decentralise redirect; } |