From 355f8d0066defce3ee5ef2a8a1e0b17a85f99e68 Mon Sep 17 00:00:00 2001 From: packetcat Date: Sun, 2 Jul 2023 21:06:34 -0400 Subject: [PATCH] add dhparams to dresden --- ubuntu/dresden.silvestris.systems.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/ubuntu/dresden.silvestris.systems.yml b/ubuntu/dresden.silvestris.systems.yml index 8c4d5a2..76bec84 100644 --- a/ubuntu/dresden.silvestris.systems.yml +++ b/ubuntu/dresden.silvestris.systems.yml @@ -78,6 +78,7 @@ - ssl_protocols TLSv1.2 TLSv1.3 - ssl_prefer_server_ciphers on - ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256' + - ssl_dhparam "/etc/nginx/dhparams.pem" - ssl_session_timeout 1d - ssl_session_cache shared:SSL:50m - ssl_session_tickets off