diff options
| author | gunchleoc <fios@foramnagaidhlig.net> | 2023-08-31 12:17:10 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-08-31 12:17:10 +0200 |
| commit | cb9f96036cf78835e22aafb30b80717b5a8b7394 (patch) | |
| tree | 3b85a012d39ecc2bf398f6383fc59d6807923b36 | |
| parent | 430eac3eb1021d30f1ca73ec21444a3a5cb0bab7 (diff) | |
Add suggestion for secure cyphers to nginx.conf (#26349)
| -rw-r--r-- | dist/nginx.conf | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/dist/nginx.conf b/dist/nginx.conf index 39fa58e50dc..5bb99038649 100644 --- a/dist/nginx.conf +++ b/dist/nginx.conf @@ -36,7 +36,11 @@ server { server_name example.com; ssl_protocols TLSv1.2 TLSv1.3; - ssl_ciphers HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA; + + # You can use https://ssl-config.mozilla.org/ to generate your cipher set. + # We recommend their "Intermediate" level. + ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305; + ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; ssl_session_tickets off; |