diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2020-04-01 10:28:10 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2020-04-01 10:30:30 -0400 |
| commit | 3e4ee0cb285a5e0a944edd24add2942229dceba9 (patch) | |
| tree | 1a985c002adc3739edd21f2de3f7afe20ef998a9 /nginx/snippets/https.conf | |
| parent | ba080193c8aff46197479166a62619ae26e2d34d (diff) | |
move nginx https setup into a snippet
Diffstat (limited to 'nginx/snippets/https.conf')
| -rw-r--r-- | nginx/snippets/https.conf | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/nginx/snippets/https.conf b/nginx/snippets/https.conf new file mode 100644 index 00000000..290a1e95 --- /dev/null +++ b/nginx/snippets/https.conf @@ -0,0 +1,11 @@ +listen 443 ssl http2; +listen [::]:443 ssl http2; + +ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; +ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; +include /etc/letsencrypt/options-ssl-nginx.conf; +ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + +ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem; +ssl_stapling on; +ssl_stapling_verify on; |