diff --git a/etc/nginx/conf.d/mozModern_ssl.conf b/etc/nginx/conf.d/mozModern_ssl.conf index e5649c2..cb16e8d 100644 --- a/etc/nginx/conf.d/mozModern_ssl.conf +++ b/etc/nginx/conf.d/mozModern_ssl.conf @@ -20,7 +20,7 @@ ssl_prefer_server_ciphers on; ssl_early_data on; # Diffie-Hellman parameter for DHE cipher suites, using 4096 bits -ssl_dhparam /path/to/your_dhparam.pem; +ssl_dhparam ; # HSTS -- please understand the implications of HSTS before enabling it # do NOT implement while still testing configurations or site parameters @@ -33,6 +33,6 @@ ssl_stapling on; ssl_stapling_verify on; # verify chain of trust of OCSP response using Root CA and Intermediate certs -ssl_trusted_certificate /path/to/your_CA_bundle.crt; +ssl_trusted_certificate ; # resolver should be specified in nginx.conf or in networking configuration diff --git a/etc/nginx/snippets/server_names.conf b/etc/nginx/snippets/server_names.conf index bd45005..9e45503 100644 --- a/etc/nginx/snippets/server_names.conf +++ b/etc/nginx/snippets/server_names.conf @@ -3,4 +3,5 @@ ####### server_name + ; diff --git a/etc/nginx/snippets/ssl/ssl_certs.conf b/etc/nginx/snippets/ssl/ssl_certs.conf index 82e402f..da9118f 100644 --- a/etc/nginx/snippets/ssl/ssl_certs.conf +++ b/etc/nginx/snippets/ssl/ssl_certs.conf @@ -2,5 +2,5 @@ ### NGINX configuration - location of SSL certificates ####### -ssl_certificate /path/to/your_ssl_certificate_fullchain; -ssl_certificate_key /path/to/your_certificate_private_key.key; +ssl_certificate ; +ssl_certificate_key ;