This repository has been archived on 2021-12-24. You can view files and clone it, but cannot push or open issues/pull-requests.
2021-01-09 15:15:22 +01:00
|
|
|
http {
|
2021-04-23 16:26:32 +02:00
|
|
|
# COMMON SSL CONFIGURATION
|
2021-01-09 15:15:22 +01:00
|
|
|
# Allowed protocols
|
|
|
|
ssl_protocols TLSv1.2;
|
|
|
|
|
|
|
|
# Allowed cyphers
|
|
|
|
# ssl_ciphers EECDH+CHACHA20:EECDH+AES;
|
|
|
|
|
|
|
|
# Cache settings
|
2021-01-09 15:23:04 +01:00
|
|
|
ssl_session_cache shared:SSL:10m;
|
|
|
|
ssl_session_timeout 10m;
|
2021-01-09 15:15:22 +01:00
|
|
|
|
|
|
|
# Still gotta figure out what these do
|
2021-01-09 15:23:04 +01:00
|
|
|
ssl_session_tickets off;
|
|
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
ssl_ecdh_curve X25519:prime256v1:secp521r1:secp384r1;
|
2021-01-09 15:15:22 +01:00
|
|
|
|
|
|
|
|
|
|
|
# Auto-route all HTTP requests to HTTPS
|
|
|
|
server {
|
|
|
|
listen ${HTTP_PORT};
|
|
|
|
listen [::]:${HTTP_PORT};
|
|
|
|
server_name _;
|
|
|
|
|
|
|
|
return 301 https://$host:${HTTPS_PORT}$request_uri;
|
|
|
|
}
|
|
|
|
|
|
|
|
# LOAD SITES
|
2021-04-23 21:46:35 +02:00
|
|
|
include conf.d/sites-enabled/*.conf;
|
2021-01-09 15:15:22 +01:00
|
|
|
}
|