From c9243879059466180028b13736986025f5ef1f0a Mon Sep 17 00:00:00 2001
From: staticsafe <me@staticsafe.ca>
Date: Sun, 24 May 2015 13:30:29 -0400
Subject: [PATCH] Better cipher settings for nginx.

---
 debian/roles/webservers-nginx/files/nginx.conf | 2 --
 ubuntu/roles/webservers-nginx/files/nginx.conf | 2 --
 2 files changed, 4 deletions(-)

diff --git a/debian/roles/webservers-nginx/files/nginx.conf b/debian/roles/webservers-nginx/files/nginx.conf
index 8a75855..0e7372f 100644
--- a/debian/roles/webservers-nginx/files/nginx.conf
+++ b/debian/roles/webservers-nginx/files/nginx.conf
@@ -60,6 +60,4 @@ http {
 	}
 
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-    ssl_prefer_server_ciphers on;
-    ssl_ciphers !3DES:!AES128:!aNULL:!eNULL:FIPS@STRENGTH;
 }
diff --git a/ubuntu/roles/webservers-nginx/files/nginx.conf b/ubuntu/roles/webservers-nginx/files/nginx.conf
index 8a75855..0e7372f 100644
--- a/ubuntu/roles/webservers-nginx/files/nginx.conf
+++ b/ubuntu/roles/webservers-nginx/files/nginx.conf
@@ -60,6 +60,4 @@ http {
 	}
 
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-    ssl_prefer_server_ciphers on;
-    ssl_ciphers !3DES:!AES128:!aNULL:!eNULL:FIPS@STRENGTH;
 }