mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2024-11-23 05:01:04 +01:00
13 lines
456 B
Plaintext
13 lines
456 B
Plaintext
|
listen 443 ssl http2;
|
||
|
|
listen [::]:443 ssl http2;
|
||
|
|
ssl_session_timeout 1d;
|
||
|
|
ssl_session_cache shared:SSL:50m;
|
||
|
|
ssl_session_tickets off;
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
add_header Strict-Transport-Security max-age=15768000;
|
||
|
|
ssl_stapling on;
|
||
|
|
ssl_stapling_verify on;
|
||
|
|
ssl_certificate /etc/letsencrypt/live/{{domain}}/fullchain.pem;
|
||
|
|
ssl_certificate_key /etc/letsencrypt/live/{{domain}}/privkey.pem;
|
||
|
|
ssl_trusted_certificate /etc/letsencrypt/live/{{domain}}/chain.pem;
|