From feab32bb99caf360129e46f5e4b4e6f3f3c8538c Mon Sep 17 00:00:00 2001
From: Florian Dold <florian.dold@gmail.com>
Date: Fri, 22 Apr 2016 01:37:37 +0200
Subject: python shop

---
 etc/nginx/conf.d/talerssl | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 etc/nginx/conf.d/talerssl

(limited to 'etc/nginx/conf.d/talerssl')

diff --git a/etc/nginx/conf.d/talerssl b/etc/nginx/conf.d/talerssl
new file mode 100644
index 0000000..3deae2c
--- /dev/null
+++ b/etc/nginx/conf.d/talerssl
@@ -0,0 +1,9 @@
+ssl_certificate /etc/letsencrypt/live/taler.net/fullchain.pem;
+ssl_certificate_key /etc/letsencrypt/live/taler.net/privkey.pem;
+ssl_prefer_server_ciphers on;
+ssl_session_cache shared:SSL:10m;
+ssl_dhparam /etc/ssl/certs/dhparam.pem;
+ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
+ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+add_header Strict-Transport-Security "max-age=63072000; preload";
-- 
cgit v1.2.3