From 8abd09d3dca6eb2530135f4338951fd169abc1dc Mon Sep 17 00:00:00 2001 From: Mathijs Lermer Date: Wed, 28 Oct 2020 13:38:48 +0100 Subject: [PATCH] 'nginx/nginx/conf_split/ssl_protocol_strong.conf' toevoegen --- nginx/nginx/conf_split/ssl_protocol_strong.conf | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 nginx/nginx/conf_split/ssl_protocol_strong.conf diff --git a/nginx/nginx/conf_split/ssl_protocol_strong.conf b/nginx/nginx/conf_split/ssl_protocol_strong.conf new file mode 100644 index 0000000..df48bac --- /dev/null +++ b/nginx/nginx/conf_split/ssl_protocol_strong.conf @@ -0,0 +1,16 @@ +# https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP + +ssl_session_cache shared:SSL:10m; +ssl_protocols TLSv1.3 TLSv1.2; + +# A+ en max veilig: +ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305"; + +ssl_prefer_server_ciphers on; +ssl_stapling on; +ssl_stapling_verify on; +resolver 1.1.1.1 1.0.0.1 8.8.8.8 8.8.4.4 [2606:4700:4700::1111] [2606:4700:4700::1001] valid=300s; +resolver_timeout 5s; +ssl_session_timeout 1d; +ssl_session_tickets off; +server_tokens off; \ No newline at end of file