10 lines
393 B
Plaintext
10 lines
393 B
Plaintext
---
|
|
---
|
|
ssl_dhparam {{ site.dhparam-path }}/dh2048.pem;
|
|
|
|
ssl_session_timeout 5m;
|
|
|
|
ssl_protocols TLSv1.1 TLSv1.2;
|
|
ssl_ciphers 'DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK';
|
|
ssl_prefer_server_ciphers on;
|