From b794f84da1aaf446a3965f9b9363f997b3183872 Mon Sep 17 00:00:00 2001
From: "Suren A. Chilingaryan" <csa@suren.me>
Date: Sun, 6 Oct 2019 05:53:11 +0200
Subject: Initial configuration

---
 conf.d/02_ssl.conf | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 conf.d/02_ssl.conf

(limited to 'conf.d/02_ssl.conf')

diff --git a/conf.d/02_ssl.conf b/conf.d/02_ssl.conf
new file mode 100644
index 0000000..3b00354
--- /dev/null
+++ b/conf.d/02_ssl.conf
@@ -0,0 +1,8 @@
+ssl_certificate  /etc/nginx/certs/localhost.crt;
+ssl_certificate_key  /etc/nginx/certs/localhost.key;
+ssl_session_timeout  5m;
+ssl_prefer_server_ciphers  on;
+ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
+ssl_ciphers  AES256+EECDH:AES256+EDH:!aNULL;
+
+proxy_ssl_server_name on;
-- 
cgit v1.2.1