diff options
| -rw-r--r-- | deploy/conf/nginx.conf | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/deploy/conf/nginx.conf b/deploy/conf/nginx.conf index f5acdf2..a3b408b 100644 --- a/deploy/conf/nginx.conf +++ b/deploy/conf/nginx.conf @@ -33,6 +33,7 @@ server { ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE+CHACHA20:AES256+EECDH:AES256+EDH:!aNULL; + ssl_ecdhparam x25519:secp521r1:secp384r1; ssl_prefer_server_ciphers on; ssl_session_cache shared:TLS:2m; ssl_session_timeout 10m; @@ -67,8 +68,9 @@ server { server_name plural.cafe; server_tokens off; - ssl_protocols TLSv1.2 TLSv1.3; + ssl_protocols TLSv1.3 TLSv1.2; ssl_ciphers ECDHE+CHACHA20:AES256+EECDH:AES256+EDH:!aNULL; + ssl_ecdhparam x25519:secp521r1:secp384r1; ssl_prefer_server_ciphers on; ssl_session_cache shared:TLS:2m; ssl_session_timeout 10m; |