packetcat
/
ansible-playbooks
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

We are moving to Mozilla's recommended settings for 'Modern' browsers.

This commit is contained in:
staticsafe 2017-05-08 22:36:25 -04:00
parent c80fc35887
commit bc0645c412
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ubuntu/site.yml
View File

@ -222,6 +222,7 @@
upstream:
- upstream php { server unix:/run/php/php7.0-fpm.sock; }
ssl:
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2
- ssl_protocols TLSv1.2
- ssl_prefer_server_ciphers on
- ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256'
- ssl_dhparam "/etc/nginx/dhparams.pem"