Initial commit

2026-06-24 17:29:12 -04:00
commit 72b96c06a4
15 changed files with 470 additions and 0 deletions
@@ -0,0 +1,10 @@
+# /etc/nginx/snippets/ssl-params.conf
+# Shared TLS parameters. Cert paths live with the site, not here.
+ssl_protocols TLSv1.2 TLSv1.3;
+ssl_prefer_server_ciphers on;
+ssl_ciphers EECDH+AESGCM:EDH+AESGCM;
+ssl_session_cache shared:SSL:10m;
+ssl_session_timeout 10m;
+
+ssl_stapling on;
+ssl_stapling_verify on;