fro/srv-pub
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

/ mozilla ssl cfg generator

Browse Source
This commit is contained in:
fro
2025-10-28 16:17:38 -05:00
parent 037b6b8117
commit 09e8cdf6c9
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
cfg/ngx/nginx.conf
View File

@@ -32,8 +32,18 @@ http {
## ##
ssl_protocols TLSv1.2 TLSv1.3; # Dropping SSLv3 (POODLE), TLS 1.0, 1.1 ssl_protocols TLSv1.2 TLSv1.3; # Dropping SSLv3 (POODLE), TLS 1.0, 1.1
ssl_ecdh_curve X25519:prime256v1:secp384r1;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
ssl_prefer_server_ciphers off; # Don't force server cipher order. ssl_prefer_server_ciphers off; # Don't force server cipher order.
# see also ssl_session_ticket_key alternative to stateful session cache
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
# mkdir -p /var/www/dhparam
# curl https://ssl-config.mozilla.org/ffdhe2048.txt > /var/www/dhparam/dhparam
ssl_dhparam "/var/www/dhparam/dhparam";
## ##
# Logging Settings # Logging Settings
## ##