computer-playbook/roles/native-letsencrypt/templates/ssl_header.j2

13 lines
455 B
Plaintext
Raw Normal View History

2020-12-24 14:27:31 +01:00
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
2021-01-03 00:39:37 +01:00
ssl_session_tickets on;
2020-12-24 14:27:31 +01:00
ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security max-age=15768000;
ssl_stapling on;
ssl_stapling_verify on;
ssl_certificate /etc/letsencrypt/live/{{domain}}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/{{domain}}/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/{{domain}}/chain.pem;