ansible_role_nginx/files/nginx/snippets/tls_parameters.snippet.conf

ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;

ssl_dhparam /etc/nginx/private/dhparam.pem;

#ssl_stapling on;
#ssl_stapling_verify on;
#resolver 8.8.8.8 1.1.1.1 valid=300s;
#resolver_timeout 3s;
Initial checkin 2020-11-02 04:51:35 +01:00			`ssl_protocols TLSv1.2 TLSv1.3;`
			`ssl_prefer_server_ciphers on;`
Extend per-site snippet handling to tls, certificates and logging 2020-12-23 03:49:11 +01:00
Support generation of dhparam Note: Default length is 2048 bits, but can be changed by var 2020-12-24 19:52:31 +01:00			`ssl_dhparam /etc/nginx/private/dhparam.pem;`

Initial checkin 2020-11-02 04:51:35 +01:00			`#ssl_stapling on;`
			`#ssl_stapling_verify on;`
Extend per-site snippet handling to tls, certificates and logging 2020-12-23 03:49:11 +01:00			`#resolver 8.8.8.8 1.1.1.1 valid=300s;`
Initial checkin 2020-11-02 04:51:35 +01:00			`#resolver_timeout 3s;`