kris/vagrant-easyredmine
1
0
Fork 0
mirror of https://github.com/krislamo/vagrant-easyredmine synced 2024-12-16 15:30:34 +00:00
Code Issues Releases Wiki Activity

set nginx ssl_ciphers and ss_protocols

Browse Source
This commit is contained in:
Mark Heiges 2016-04-20 16:27:32 -04:00
parent ecf3e6ae77
commit 44b56fca18
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
roles/easyredmine/templates/nginx.conf.j2
View File

@ -15,9 +15,14 @@ server {
{% else %} {% else %}
server_name {{ ansible_fqdn }}; server_name {{ ansible_fqdn }};
{% endif %} {% endif %}
ssl on; ssl on;
ssl_certificate /etc/pki/tls/certs/{{ ansible_fqdn }}.pem; ssl_certificate /etc/pki/tls/certs/{{ ansible_fqdn }}.pem;
ssl_certificate_key /etc/pki/tls/certs/{{ ansible_fqdn }}.pem; ssl_certificate_key /etc/pki/tls/certs/{{ ansible_fqdn }}.pem;
ssl_ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:!DSS:!DH+3DES;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
root {{ redmine_root_dir }}/public; root {{ redmine_root_dir }}/public;
passenger_enabled on; passenger_enabled on;
client_max_body_size 50M; client_max_body_size 50M;