blob: 2729c095cd4f569fb59b0c1325f2657d7201a707 (
plain)
1
2
3
4
5
6
7
8
|
ssl_prefer_server_ciphers On;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS;
add_header Strict-Transport-Security max-age=15768000;
ssl_session_cache shared:SSL:50m;
ssl_session_timeout 10m;
ssl_dhparam {{.DHParam}};
ssl_buffer_size 1400;
|