move nginx https setup into a snippet

1 files changed, 11 insertions, 0 deletions

diff --git a/nginx/snippets/https.conf b/nginx/snippets/https.conf
new file mode 100644
index 00000000..290a1e95
--- /dev/null
+++ b/nginx/snippets/https.conf
@@ -0,0 +1,11 @@
+listen 443 ssl http2;
+listen [::]:443 ssl http2;
+
+ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
+ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;
+include /etc/letsencrypt/options-ssl-nginx.conf;
+ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;
+ssl_stapling on;
+ssl_stapling_verify on;