summaryrefslogtreecommitdiffstats
path: root/conf.d/02_ssl.conf
diff options
context:
space:
mode:
authorSuren A. Chilingaryan <csa@suren.me>2019-10-06 05:53:11 +0200
committerSuren A. Chilingaryan <csa@suren.me>2019-10-06 05:53:11 +0200
commitb794f84da1aaf446a3965f9b9363f997b3183872 (patch)
treed59f80c7587b8748b79cdeecfb112892e7ccf083 /conf.d/02_ssl.conf
downloadiperouter-b794f84da1aaf446a3965f9b9363f997b3183872.tar.gz
iperouter-b794f84da1aaf446a3965f9b9363f997b3183872.tar.bz2
iperouter-b794f84da1aaf446a3965f9b9363f997b3183872.tar.xz
iperouter-b794f84da1aaf446a3965f9b9363f997b3183872.zip
Initial configuration
Diffstat (limited to 'conf.d/02_ssl.conf')
-rw-r--r--conf.d/02_ssl.conf8
1 files changed, 8 insertions, 0 deletions
diff --git a/conf.d/02_ssl.conf b/conf.d/02_ssl.conf
new file mode 100644
index 0000000..3b00354
--- /dev/null
+++ b/conf.d/02_ssl.conf
@@ -0,0 +1,8 @@
+ssl_certificate /etc/nginx/certs/localhost.crt;
+ssl_certificate_key /etc/nginx/certs/localhost.key;
+ssl_session_timeout 5m;
+ssl_prefer_server_ciphers on;
+ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+ssl_ciphers AES256+EECDH:AES256+EDH:!aNULL;
+
+proxy_ssl_server_name on;