Add some files to make Frey install work
These can be removed later
This commit is contained in:
parent
f62074c1c1
commit
9a64b52616
|
@ -2,33 +2,6 @@ server {
|
|||
listen 80 default_server;
|
||||
listen [::]:80 default_server ipv6only=on;
|
||||
|
||||
listen 443 ssl;
|
||||
listen [::]:443 ipv6only=on ssl;
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/master.tus.io/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/master.tus.io/privkey.pem;
|
||||
ssl_trusted_certificate /etc/letsencrypt/live/master.tus.io/fullchain.pem;
|
||||
|
||||
# Load custom parameters for Diffie Hellman key exchange to avoid the usage
|
||||
# of common primes
|
||||
ssl_dhparam /etc/nginx/dhparams.pem;
|
||||
|
||||
# Enable OCSP stapling which allows clients to verify that our certificate
|
||||
# is not revoked without contacting the Certificate Authority by appending a
|
||||
# CA-signed promise, that it's still valid, to the TLS handshake response.
|
||||
ssl_stapling on;
|
||||
ssl_stapling_verify on;
|
||||
|
||||
# Enable SSL session cache to reduce overhead of TLS handshake. Allow nginx
|
||||
# workers to use 5MB of memory for caching but disable session tickets as
|
||||
# there is currently no easy way to rotate the ticket key which is not in
|
||||
# sync with the ideals of Perfect Forward Secrecy.
|
||||
ssl_session_timeout 1d;
|
||||
ssl_session_cache shared:SSL:5m;
|
||||
ssl_session_tickets off;
|
||||
|
||||
server_name master.tus.io;
|
||||
|
||||
# certbot will place the files required for the HTTP challenge in the
|
||||
# webroot under the .well-known/acme-challenge directory. Therefore we must
|
||||
# make this path publicly accessible.
|
||||
|
|
Binary file not shown.
Loading…
Reference in New Issue