vikarti.anatra/nginx-ultimate-bad-bot-blocker
1
0
Fork 0
mirror of https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker.git synced 2025-09-04 11:40:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

UPDATE ssl.d/globalssl.conf [ci skip]

Browse source 
Recommended SSL settings for all nginx sites
This commit is contained in:
Mitchell Krog 2019-07-04 13:30:22 +02:00
parent 90e8578247
commit 9a35bb888c
No known key found for this signature in database
GPG key ID: C243C388553EDE5D
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
ssl.d/globalssl.conf
View file

@ -54,7 +54,7 @@
# include /etc/nginx/ssl.d/globalssl.conf; # include /etc/nginx/ssl.d/globalssl.conf;
## ##
# DIFFIE HELMAN ENCRYPTION / DHE # DIFFIE HELMAN ENCRYPTION / DHE
## ##
@ -128,9 +128,9 @@
ssl_stapling on; ssl_stapling on;
ssl_stapling_verify on; ssl_stapling_verify on;
# Do not use resolvers for OCSP see comment in - https://scotthelme.co.uk/ocsp-stapling-speeding-up-ssl/ # Do not use resolvers for OCSP see comment in - https://scotthelme.co.uk/ocsp-stapling-speeding-up-ssl/
# http://disq.us/url?url=http%3A%2F%2Fblog.zorinaq.com%2Fnginx-resolver-vulns%2F%3AP2dn26U8hf5EMF__e_ZIRGBpc3E&cuid=2541595 # http://disq.us/url?url=http%3A%2F%2Fblog.zorinaq.com%2Fnginx-resolver-vulns%2F%3AP2dn26U8hf5EMF__e_ZIRGBpc3E&cuid=2541595
# resolver 8.8.8.8 8.8.4.4 valid=300s; # resolver 8.8.8.8 8.8.4.4 valid=300s;
# resolver_timeout 5s; # resolver_timeout 5s;