diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2016-06-17 17:00:34 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2016-06-17 17:00:34 -0300 |
| commit | ef0ae87c15ed88e653b48acd3f64b39b5e0311b9 (patch) | |
| tree | 645a1c0e4e7943bdf454d2f54074a6f8b14a0cca | |
| parent | 87521903b5d4b9dc96758b4e734ca3db96c9b214 (diff) | |
| download | puppet-nginx-ef0ae87c15ed88e653b48acd3f64b39b5e0311b9.tar.gz puppet-nginx-ef0ae87c15ed88e653b48acd3f64b39b5e0311b9.tar.bz2 | |
Cleanup site-ssl.erb
| -rw-r--r-- | templates/site-ssl.erb | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/templates/site-ssl.erb b/templates/site-ssl.erb index ee9c5c8..55c51d7 100644 --- a/templates/site-ssl.erb +++ b/templates/site-ssl.erb @@ -6,13 +6,6 @@ server { ssl_certificate /etc/letsencrypt/live/<%= @use_fqdn %>/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/<%= @use_fqdn %>/privkey.pem; - ssl_session_timeout 5m; - - ssl_protocols TLSv1 TLSv1.1 TLSv1.2; - ssl_ciphers ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA; - ssl_prefer_server_ciphers on; - ssl_dhparam /etc/ssl/dhparams/dhparams_2048.pem; - # enable HSTS header add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload"; |