Warezjoe/ansible_uni_deploy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Adding some includes

Browse Source
This commit is contained in:
warezjoe
2026-03-03 14:49:11 +01:00
parent 3fb12ed9d8
commit 3e5a68a93a
4 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
roles/nginx-proxy/templates/force-ssl.conf Normal file
View File

@@ -0,0 +1,10 @@
set $test "";
if ($scheme = "http") {
set $test "H";
}
if ($request_uri = /.well-known/acme-challenge/test-challenge) {
set $test "${test}T";
}
if ($test = H) {
return 301 https://$host$request_uri;
}

2
roles/nginx-proxy/templates/ssl-cache.conf Normal file
View File

@@ -0,0 +1,2 @@
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:50m;

4
roles/nginx-proxy/templates/ssl-ciphers.conf Normal file
View File

@@ -0,0 +1,4 @@
# intermediate configuration. tweak to your needs.
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
ssl_prefer_server_ciphers off;