From d5029c73cd3592a11d5d76b8bce03a024495685a Mon Sep 17 00:00:00 2001 From: Jeff Geerling Date: Wed, 3 Jan 2018 21:25:48 -0600 Subject: [PATCH] Issue #83: Vastly simplify the initial Nginx https server config. --- .../provisioning/templates/https.test.conf.j2 | 17 ----------------- 1 file changed, 17 deletions(-) diff --git a/https-self-signed/provisioning/templates/https.test.conf.j2 b/https-self-signed/provisioning/templates/https.test.conf.j2 index da3c31a..1e3c459 100644 --- a/https-self-signed/provisioning/templates/https.test.conf.j2 +++ b/https-self-signed/provisioning/templates/https.test.conf.j2 @@ -12,25 +12,8 @@ server { server { listen 443 ssl default_server; server_name {{ server_hostname }}; - index index.html; root {{ nginx_docroot }}; ssl_certificate {{ certificate_dir }}/{{ server_hostname }}/fullchain.pem; ssl_certificate_key {{ certificate_dir }}/{{ server_hostname }}/privkey.pem; - ssl_trusted_certificate {{ certificate_dir }}/{{ server_hostname }}/fullchain.pem; - ssl_session_timeout 1d; - ssl_session_cache shared:SSL:50m; - ssl_session_tickets off; - - ssl_protocols TLSv1.2; - ssl_ciphers EECDH+AESGCM:EECDH+AES; - ssl_ecdh_curve secp384r1; - ssl_prefer_server_ciphers on; - - ssl_stapling on; - ssl_stapling_verify on; - - add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload"; - add_header X-Frame-Options DENY; - add_header X-Content-Type-Options nosniff; }