Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ssl.conf
- ssl_dhparam /etc/ssl/certs/dhparam.pem;
- ssl_session_timeout 1d;
- ssl_session_cache shared:SSL:50m;
- ssl_session_tickets off;
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
- ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-$
- ssl_prefer_server_ciphers on;
- ssl_stapling on;
- ssl_stapling_verify on;
- resolver 8.8.8.8 8.8.4.4 valid=300s;
- resolver_timeout 30s;
- add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; pr$
- add_header X-Frame-Options SAMEORIGIN;
- add_header X-Content-Type-Options nosniff;
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement