asif/nginx-basic
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

enclosed things to be updated by script in angle brackets

Browse Source
This commit is contained in:
Asif Bacchus 2019-01-04 05:16:17 -07:00
parent a39f8f8507
commit 4baa3a1704
3 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/nginx/conf.d/mozModern_ssl.conf
View File

@ -20,7 +20,7 @@ ssl_prefer_server_ciphers on;
ssl_early_data on; ssl_early_data on;
# Diffie-Hellman parameter for DHE cipher suites, using 4096 bits # Diffie-Hellman parameter for DHE cipher suites, using 4096 bits
ssl_dhparam /path/to/your_dhparam.pem; ssl_dhparam <path/to/your_dhparam.pem>;
# HSTS -- please understand the implications of HSTS before enabling it # HSTS -- please understand the implications of HSTS before enabling it
# do NOT implement while still testing configurations or site parameters # do NOT implement while still testing configurations or site parameters
@ -33,6 +33,6 @@ ssl_stapling on;
ssl_stapling_verify on; ssl_stapling_verify on;
# verify chain of trust of OCSP response using Root CA and Intermediate certs # verify chain of trust of OCSP response using Root CA and Intermediate certs
ssl_trusted_certificate /path/to/your_CA_bundle.crt; ssl_trusted_certificate <path/to/your_CA_bundle.crt>;
# resolver should be specified in nginx.conf or in networking configuration # resolver should be specified in nginx.conf or in networking configuration

1
etc/nginx/snippets/server_names.conf
View File

@ -3,4 +3,5 @@
####### #######
server_name server_name
<server name(s)>
; ;

4
etc/nginx/snippets/ssl/ssl_certs.conf
View File

@ -2,5 +2,5 @@
### NGINX configuration - location of SSL certificates ### NGINX configuration - location of SSL certificates
####### #######
ssl_certificate /path/to/your_ssl_certificate_fullchain; ssl_certificate <path/to/your_ssl_certificate_fullchain>;
ssl_certificate_key /path/to/your_certificate_private_key.key; ssl_certificate_key <path/to/your_certificate_private_key.key>;