cyberia
/
ops-handbook
6
0
Fork 5
Code Issues 8 Pull Requests Projects Releases Wiki Activity

Improvements to the ngnix-ssl snippet #12

Merged
zico merged 1 commits from zico/ops-handbook:master into master 2022-06-12 04:25:09 +00:00
Conversation 0 Commits 1 Files Changed 1 +8 -2
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ansible/roles/nginx/templates/ssl.conf.j2
View File

@ -1,2 +1,8 @@
ssl_protocols TLSv1.2 TLSv1.3;
add_header Strict-Transport-Security max-age=31536000;
ssl_protocols TLSv1.3;
add_header Strict-Transport-Security max-age=63072000 always;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m;
ssl_session_tickets off;
ssl_prefer_server_ciphers off;
ssl_stapling on;
ssl_stapling_verify on;