kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests 2 Releases Activity

bundles/{letsencrypt,nginx}: fix ocsp stapling
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
Details

Browse source
This commit is contained in:
Franzi 2020-07-19 12:10:19 +02:00
parent 245559ee09
commit f7eb0cc150
Signed by: kunsi
GPG key ID: 12E3D2136B818350
4 changed files with 9 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
bundles/nginx/files/site_template
View file

@ -6,6 +6,7 @@ server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_trusted_certificate /var/lib/dehydrated/certs/${domain}/chain.pem;
ssl_certificate /var/lib/dehydrated/certs/${domain}/fullchain.pem;
ssl_certificate_key /var/lib/dehydrated/certs/${domain}/privkey.pem;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
@ -15,6 +16,10 @@ server {
ssl_session_cache shared:SSL:10m;
ssl_stapling on;
ssl_stapling_verify on;
ssl_stapling_file /var/lib/dehydrated/certs/${domain}/ocsp.der;
resolver 8.8.8.8 8.8.4.4 valid=300s;
resolver_timeout 5s;
add_header Strict-Transport-Security "max-age=31104000; preload";