summaryrefslogtreecommitdiff
path: root/templates
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2016-06-17 17:00:34 -0300
committerSilvio Rhatto <rhatto@riseup.net>2016-06-17 17:00:34 -0300
commitef0ae87c15ed88e653b48acd3f64b39b5e0311b9 (patch)
tree645a1c0e4e7943bdf454d2f54074a6f8b14a0cca /templates
parent87521903b5d4b9dc96758b4e734ca3db96c9b214 (diff)
downloadpuppet-nginx-ef0ae87c15ed88e653b48acd3f64b39b5e0311b9.tar.gz
puppet-nginx-ef0ae87c15ed88e653b48acd3f64b39b5e0311b9.tar.bz2
Cleanup site-ssl.erb
Diffstat (limited to 'templates')
-rw-r--r--templates/site-ssl.erb7
1 files changed, 0 insertions, 7 deletions
diff --git a/templates/site-ssl.erb b/templates/site-ssl.erb
index ee9c5c8..55c51d7 100644
--- a/templates/site-ssl.erb
+++ b/templates/site-ssl.erb
@@ -6,13 +6,6 @@ server {
ssl_certificate /etc/letsencrypt/live/<%= @use_fqdn %>/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/<%= @use_fqdn %>/privkey.pem;
- ssl_session_timeout 5m;
-
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
- ssl_ciphers ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA;
- ssl_prefer_server_ciphers on;
- ssl_dhparam /etc/ssl/dhparams/dhparams_2048.pem;
-
# enable HSTS header
add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload";