11 lines
303 B
Plaintext
11 lines
303 B
Plaintext
# /etc/nginx/snippets/ssl-params.conf
|
|
# Shared TLS parameters. Cert paths live with the site, not here.
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_prefer_server_ciphers on;
|
|
ssl_ciphers EECDH+AESGCM:EDH+AESGCM;
|
|
ssl_session_cache shared:SSL:10m;
|
|
ssl_session_timeout 10m;
|
|
|
|
ssl_stapling on;
|
|
ssl_stapling_verify on;
|