YunoHost/yunohost
1
0
Fork 0
mirror of https://github.com/YunoHost/yunohost.git synced 2024-09-03 20:06:10 +02:00
Code Issues Projects Releases Packages Wiki Activity

Harden TLS

Browse source 
+Strongest TLS Ciphers (Ephemeral Elliptic Curve Diffie-Hellman, Galois/Counter Mode)
+Stapling
This commit is contained in:
Jordan Bradley 2016-06-12 13:00:20 +02:00 • committed by GitHub
parent 853f5d65d9
commit 6ce29669e9
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
data/templates/nginx/plain/yunohost_admin.conf
View file

@ -21,9 +21,13 @@ server {
ssl_session_cache shared:SSL:50m;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ALL:!aNULL:!eNULL:!LOW:!EXP:!RC4:!3DES:+HIGH:+MEDIUM;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
ssl_ecdh_curve secp384r1;
ssl_stapling on;
ssl_stapling_verify on;
add_header Strict-Transport-Security "max-age=31536000;";
add_header X-Content-Type-Options nosniff;
location / {
return 302 https://$http_host/yunohost/admin;