tradewind/nginx-conf
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

#update template

Browse Source
This commit is contained in:
tradewind
2024-06-25 11:44:07 +08:00
parent 2dfb95af7e
commit 1b6f0402aa
22 changed files with 503 additions and 428 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
sites-available/www
View File

@ -29,8 +29,16 @@ server {
ssl_certificate /etc/letsencrypt/live/tradewind.vip/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/tradewind.vip/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
ssl_session_tickets off;
# modern configuration
ssl_protocols TLSv1.3;
ssl_prefer_server_ciphers off;
# HSTS (ngx_http_headers_module is required) (63072000 seconds)
add_header Strict-Transport-Security "max-age=63072000" always;
#
# Note: You should disable gzip for SSL traffic.
# See: https://bugs.debian.org/773332