summaryrefslogtreecommitdiffstats
path: root/tozt/nginx/files/ssl
blob: 6248ac80e653c20076289afd5689d606b889910a (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
ssl                        on;
ssl_certificate            /media/persistent/certbot/live/tozt.net/fullchain.pem;
ssl_certificate_key        /media/persistent/certbot/live/tozt.net/privkey.pem;
ssl_protocols              TLSv1.1 TLSv1.2;
ssl_ciphers                'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
ssl_dhparam                /etc/nginx/dhparam.pem;
ssl_prefer_server_ciphers  on;
ssl_session_cache          shared:SSL:10m;
ssl_stapling               on;
ssl_stapling_verify        on;

# vim:ft=nginx