diff options
Diffstat (limited to 'etc/nginx/talerssl')
-rw-r--r-- | etc/nginx/talerssl | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/etc/nginx/talerssl b/etc/nginx/talerssl new file mode 100644 index 0000000..3deae2c --- /dev/null +++ b/etc/nginx/talerssl @@ -0,0 +1,9 @@ +ssl_certificate /etc/letsencrypt/live/taler.net/fullchain.pem; +ssl_certificate_key /etc/letsencrypt/live/taler.net/privkey.pem; +ssl_prefer_server_ciphers on; +ssl_session_cache shared:SSL:10m; +ssl_dhparam /etc/ssl/certs/dhparam.pem; +ssl_protocols TLSv1.2 TLSv1.1 TLSv1; +ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; + +add_header Strict-Transport-Security "max-age=63072000; preload"; |