Force minimum TLS version to 1.2

tonybaloney · tonybaloney · commit 3367e47f0ee5 · 2024-05-06T15:54:32.000+10:00
diff --git a/infra/resources.bicep b/infra/resources.bicep
@@ -169,6 +169,7 @@ resource web 'Microsoft.Web/sites@2022-03-01' = {
       linuxFxVersion: 'PYTHON|3.11'
       ftpsState: 'Disabled'
       appCommandLine: 'startup.sh'
+      minTlsVersion: '1.2'
     }
     httpsOnly: true
   }
@@ -357,6 +358,7 @@ resource redisCache 'Microsoft.Cache/redis@2023-04-01' = {
     enableNonSslPort:false
     redisVersion:'6'
     publicNetworkAccess:'Disabled'
+    minimumTlsVersion: '1.2'
   }
 }    
 

Original file line number	Diff line number	Diff line change
`@@ -169,6 +169,7 @@ resource web 'Microsoft.Web/sites@2022-03-01' = {`
`169`	`169`	`linuxFxVersion: 'PYTHON\|3.11'`
`170`	`170`	`ftpsState: 'Disabled'`
`171`	`171`	`appCommandLine: 'startup.sh'`
	`172`	`+ minTlsVersion: '1.2'`
`172`	`173`	`}`
`173`	`174`	`httpsOnly: true`
`174`	`175`	`}`
`@@ -357,6 +358,7 @@ resource redisCache 'Microsoft.Cache/redis@2023-04-01' = {`
`357`	`358`	`enableNonSslPort:false`
`358`	`359`	`redisVersion:'6'`
`359`	`360`	`publicNetworkAccess:'Disabled'`
	`361`	`+ minimumTlsVersion: '1.2'`
`360`	`362`	`}`
`361`	`363`	`}`
`362`	`364`