You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
18 lines
751 B
YAML
18 lines
751 B
YAML
6 years ago
|
---
|
||
|
|
|
||
|
|
nginx_unnecessary_files:
|
||
|
|
- sites-available
|
||
|
|
- sites-enabled
|
||
|
|
|
||
|
|
nginx_ssl_configuration: |
|
||
|
|
ssl_protocols TLSv1.2;
|
||
|
|
ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_session_cache shared:SSL:10m;
|
||
|
|
ssl_session_timeout 10m;
|
||
|
|
|
||
|
|
nginx_https_configuration: |
|
||
|
|
{{ nginx_ssl_configuration }}
|
||
|
|
add_header Strict-Transport-Security 'max-age=15768000; includeSubDomains; preload;'; # default max age: 2592000 = 30 * 24 * 60 * 60s
|
||
|
|
add_header 'Referrer-Policy' 'same-origin';
|