Add some files to make Frey install work
These can be removed later
This commit is contained in:
parent
f62074c1c1
commit
9a64b52616
|
@ -2,33 +2,6 @@ server {
|
||||||
listen 80 default_server;
|
listen 80 default_server;
|
||||||
listen [::]:80 default_server ipv6only=on;
|
listen [::]:80 default_server ipv6only=on;
|
||||||
|
|
||||||
listen 443 ssl;
|
|
||||||
listen [::]:443 ipv6only=on ssl;
|
|
||||||
|
|
||||||
ssl_certificate /etc/letsencrypt/live/master.tus.io/fullchain.pem;
|
|
||||||
ssl_certificate_key /etc/letsencrypt/live/master.tus.io/privkey.pem;
|
|
||||||
ssl_trusted_certificate /etc/letsencrypt/live/master.tus.io/fullchain.pem;
|
|
||||||
|
|
||||||
# Load custom parameters for Diffie Hellman key exchange to avoid the usage
|
|
||||||
# of common primes
|
|
||||||
ssl_dhparam /etc/nginx/dhparams.pem;
|
|
||||||
|
|
||||||
# Enable OCSP stapling which allows clients to verify that our certificate
|
|
||||||
# is not revoked without contacting the Certificate Authority by appending a
|
|
||||||
# CA-signed promise, that it's still valid, to the TLS handshake response.
|
|
||||||
ssl_stapling on;
|
|
||||||
ssl_stapling_verify on;
|
|
||||||
|
|
||||||
# Enable SSL session cache to reduce overhead of TLS handshake. Allow nginx
|
|
||||||
# workers to use 5MB of memory for caching but disable session tickets as
|
|
||||||
# there is currently no easy way to rotate the ticket key which is not in
|
|
||||||
# sync with the ideals of Perfect Forward Secrecy.
|
|
||||||
ssl_session_timeout 1d;
|
|
||||||
ssl_session_cache shared:SSL:5m;
|
|
||||||
ssl_session_tickets off;
|
|
||||||
|
|
||||||
server_name master.tus.io;
|
|
||||||
|
|
||||||
# certbot will place the files required for the HTTP challenge in the
|
# certbot will place the files required for the HTTP challenge in the
|
||||||
# webroot under the .well-known/acme-challenge directory. Therefore we must
|
# webroot under the .well-known/acme-challenge directory. Therefore we must
|
||||||
# make this path publicly accessible.
|
# make this path publicly accessible.
|
||||||
|
|
Binary file not shown.
Loading…
Reference in New Issue