diff options
| -rw-r--r-- | deploy/conf/nginx.conf | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/deploy/conf/nginx.conf b/deploy/conf/nginx.conf index a3b408b..e005f86 100644 --- a/deploy/conf/nginx.conf +++ b/deploy/conf/nginx.conf @@ -33,13 +33,14 @@ server { ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE+CHACHA20:AES256+EECDH:AES256+EDH:!aNULL; - ssl_ecdhparam x25519:secp521r1:secp384r1; + ssl_ecdh_curve X25519:secp521r1:secp384r1; ssl_prefer_server_ciphers on; ssl_session_cache shared:TLS:2m; ssl_session_timeout 10m; ssl_session_tickets off; ssl_stapling on; ssl_stapling_verify on; + ssl_dhparam /etc/ssl/dhparam.pem; keepalive_timeout 70; sendfile on; @@ -70,13 +71,14 @@ server { ssl_protocols TLSv1.3 TLSv1.2; ssl_ciphers ECDHE+CHACHA20:AES256+EECDH:AES256+EDH:!aNULL; - ssl_ecdhparam x25519:secp521r1:secp384r1; + ssl_ecdh_curve X25519:secp521r1:secp384r1; ssl_prefer_server_ciphers on; ssl_session_cache shared:TLS:2m; ssl_session_timeout 10m; ssl_session_tickets off; ssl_stapling on; ssl_stapling_verify on; + ssl_dhparam /etc/ssl/dhparam.pem; keepalive_timeout 70; sendfile on; |