tls
No OneTemporary
Actions

Size

944 B

Referenced Files

None

Subscribers

None

tls
View Options

	# -------------------------------------------------------------
	# Configuration for nginx TLS
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Author: Sébastien Santoro aka Dereckson
	# Created: 2016-01-05
	# License: Trivial work, not eligible for copyright.
	# Source file: roles/webserver-core/nginx/files/includes/tls
	# -------------------------------------------------------------

	listen 443 ssl http2;
	listen [::]:443 ssl http2;

	keepalive_timeout 70;

	ssl_session_timeout 1d;
	ssl_session_cache shared:SSL:50m;
	ssl_session_tickets off;

	ssl_protocols TLSv1.2;
	ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
	ssl_prefer_server_ciphers on;