taler-deployment

commit 65feae5acbf36332e7d34fca39232cd3fb0e85e9
parent cc9ff1d25fd7cf80b21b41fc9891ee35bc29a168
Author: Florian Dold <florian.dold@gmail.com>
Date:   Tue,  1 Mar 2016 23:10:36 +0100

talerssl

Diffstat:
M
etc/nginx-sites-enabled/test.site
 | 
2
+-
A
etc/talerssl
 | 
9
+++++++++

2 files changed, 10 insertions(+), 1 deletion(-)
diff --git a/etc/nginx-sites-enabled/test.site b/etc/nginx-sites-enabled/test.site
@@ -5,5 +5,5 @@ server {
 server {
   listen 443 ssl;
   include sites-enabled/test;
-  include taler-ssl.inc;
+  include talerssl;
 }
diff --git a/etc/talerssl b/etc/talerssl
@@ -0,0 +1,9 @@
+ssl_certificate /etc/letsencrypt/live/taler.net/fullchain.pem;
+ssl_certificate_key /etc/letsencrypt/live/taler.net/privkey.pem;
+ssl_prefer_server_ciphers on;
+ssl_session_cache shared:SSL:10m;
+ssl_dhparam /etc/ssl/certs/dhparam.pem;
+ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
+ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+add_header Strict-Transport-Security "max-age=63072000; preload";