mirror of https://github.com/IoTcat/ushio-etc.git
parent
3cea1adff8
commit
eb03acf161
6 changed files with 83 additions and 28 deletions
@ -0,0 +1,30 @@ |
||||
server { |
||||
|
||||
listen 80 default_server; |
||||
listen [::]:80 default_server; |
||||
listen 443 ssl http2 default_server; |
||||
listen [::]:443 ssl http2 default_server; |
||||
server_name _; |
||||
|
||||
ssl_certificate "/mnt/config/ssl/yimian.xyz/yimian.xyz.crt"; |
||||
ssl_certificate_key "/mnt/config/ssl/yimian.xyz/yimian.xyz.key"; |
||||
|
||||
ssl_session_timeout 1d; |
||||
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions |
||||
ssl_session_tickets off; |
||||
|
||||
# curl https://ssl-config.mozilla.org/ffdhe2048.txt > /path/to/dhparam |
||||
ssl_dhparam /mnt/etc/common/nginx/dhparam; |
||||
|
||||
# intermediate configuration |
||||
ssl_protocols TLSv1.2 TLSv1.3; |
||||
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; |
||||
ssl_prefer_server_ciphers off; |
||||
|
||||
# HSTS (ngx_http_headers_module is required) (63072000 seconds) |
||||
add_header Strict-Transport-Security "max-age=63072000" always; |
||||
|
||||
location / { |
||||
rewrite ^(.*)$ https://ushio.cool/; |
||||
} |
||||
} |
@ -0,0 +1,8 @@ |
||||
-----BEGIN DH PARAMETERS----- |
||||
MIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz |
||||
+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a |
||||
87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7 |
||||
YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi |
||||
7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD |
||||
ssbzSibBsu/6iGtCOGEoXJf//////////wIBAg== |
||||
-----END DH PARAMETERS----- |
Loading…
Reference in new issue