Update 'config/nginx/nginx-default.conf'
This commit is contained in:
1 parent
b6bdbf5d98
commit
dc56307ddd
1 file changed
+7
-2
@@ -28,11 +28,16 @@ http {
|
|||||||
include /etc/nginx/mime.types;
|
include /etc/nginx/mime.types;
|
||||||
default_type text/html;
|
default_type text/html;
|
||||||
|
|
||||||
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
|
ssl_protocols TLSv1.3 TLSv1.2;
|
||||||
ssl_prefer_server_ciphers on;
|
ssl_prefer_server_ciphers on;
|
||||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
ssl_ciphers EECDH+AESGCM:EDH+AESGCM;
|
||||||
ssl_session_cache shared:SSL:20m;
|
ssl_session_cache shared:SSL:20m;
|
||||||
ssl_session_timeout 180m;
|
ssl_session_timeout 180m;
|
||||||
|
ssl_ecdh_curve secp384r1;
|
||||||
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
||||||
|
add_header X-Frame-Options sameorigin;
|
||||||
|
add_header X-Content-Type-Options nosniff;
|
||||||
|
add_header X-Xss-Protection "1; mode=block";
|
||||||
|
|
||||||
#access_log /var/log/nginx/access.log;
|
#access_log /var/log/nginx/access.log;
|
||||||
access_log off;
|
access_log off;
|
||||||
|
|||||||
Reference in new issue
Block a user