Tips-Of-Mine/infrastructure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add helpful includes

Browse Source 
Along with ensuring there are dhparams
This commit is contained in:
Jake Howard
2023-12-20 22:29:42 +00:00
parent 2336e4dd5b
commit b32a63bd72
4 changed files with 68 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
ansible/roles/nginx/files/includes/ssl.conf Normal file
View File

@ -0,0 +1,16 @@
ssl_session_timeout 1d;
ssl_session_cache shared:sslcache:10m; # about 40000 sessions
ssl_session_tickets off;
ssl_dhparam dhparams.pem;
# intermediate configuration
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
ssl_prefer_server_ciphers off;
# HSTS (ngx_http_headers_module is required) (63072000 seconds)
#add_header Strict-Transport-Security "max-age=63072000" always;
# OCSP stapling
ssl_stapling on;
ssl_stapling_verify on;