Skip to content

Commit e63032f

Browse files
authored
🔑 Update NGINX SSL parameters (#127)
1 parent be7c57d commit e63032f

File tree

1 file changed

+3
-4
lines changed

1 file changed

+3
-4
lines changed

‎bookstack/rootfs/etc/nginx/includes/ssl_params.conf‎

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
1-
ssl_protocols TLSv1.3 TLSv1.2;
2-
ssl_prefer_server_ciphers on;
3-
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA;
4-
ssl_ecdh_curve secp384r1;
1+
ssl_protocols TLSv1.2 TLSv1.3;
2+
ssl_prefer_server_ciphers off;
3+
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
54
ssl_session_timeout 10m;
65
ssl_session_cache shared:SSL:10m;
76
ssl_session_tickets off;

0 commit comments

Comments
 (0)