Improvements to the ngnix-ssl snippet #12

Merged
zico merged 1 commit from zico/ops-handbook:master into master 2022-06-12 04:25:09 +00:00

View file

@ -1,2 +1,8 @@
ssl_protocols TLSv1.2 TLSv1.3;
add_header Strict-Transport-Security max-age=31536000;
ssl_protocols TLSv1.3;
add_header Strict-Transport-Security max-age=63072000 always;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m;
ssl_session_tickets off;
ssl_prefer_server_ciphers off;
ssl_stapling on;
ssl_stapling_verify on;