riking

Untitled

May 28th, 2014
724
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.        listen 443 ssl spdy;
  2.        spdy_keepalive_timeout 300; # up from 180 secs default
  3.        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  4.        # courtesy of https://wiki.mozilla.org/Security/Server_Side_TLS#Recommended_Ciphersuite
  5.        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:AES128:AES256:RC4-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK;
  6.        ssl_prefer_server_ciphers on;
  7.  
  8.        ssl_certificate /shared/ssl/ssl.crt;
  9.        ssl_certificate_key /shared/ssl/ssl.key;
  10.  
  11.        ssl_session_tickets off;
  12.  
  13.        # enable SPDY header compression
  14.        spdy_headers_comp 6;
  15.  
  16.        # remember the certificate for a year and automatically connect to HTTPS
  17.        add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains';
  18.  
  19.        gzip on;
  20.  
  21.        if ($http_host != $$ENV_DISCOURSE_HOSTNAME) {
  22.           rewrite (.*) https://$$ENV_DISCOURSE_HOSTNAME$1 permanent;
  23.        }
RAW Paste Data

Adblocker detected! Please consider disabling it...

We've detected AdBlock Plus or some other adblocking software preventing Pastebin.com from fully loading.

We don't have any obnoxious sound, or popup ads, we actively block these annoying types of ads!

Please add Pastebin.com to your ad blocker whitelist or disable your adblocking software.

×