Disroot-Ansible/nginx
11
1
Fork 0
Code Pull requests Projects Releases 1 Activity

updated default TLS and scdh curve;

Browse source
This commit is contained in:
muppeth 2024-07-29 06:33:09 +02:00
parent 85634f409e
commit 3ea11e984b
Signed by: muppeth
GPG key ID: 0EBC7B9848D04031
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
defaults/main.yml
View file

@ -62,9 +62,9 @@ nginx_selfsigned_deps:
nginx_gen_dh: 'false'
nginx_dh_path: '{{ nginx_ssl_dir }}/dhparam.pem'
nginx_dh_length: 4096
nginx_ssl_protocols: 'TLSv1.2'
nginx_ssl_protocols: 'TLSv1.2 TLSv1.3'
nginx_ssl_ciphers: 'EECDH+AESGCM:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305'
nginx_ssl_ecdh_curve: 'secp384r1'
nginx_ssl_ecdh_curve: 'prime256v1:secp384r1'
letsencrypt_webroot_path: ''
install_letsencrypt: 'false'