summaryrefslogtreecommitdiff
path: root/nginx/snippets
diff options
context:
space:
mode:
authorDaniel Micay <danielmicay@gmail.com>2020-04-05 04:13:05 -0400
committerDaniel Micay <danielmicay@gmail.com>2020-04-05 04:13:05 -0400
commitef179138fa5d4cc89127a114ebeac12f1278bbfa (patch)
tree08155b90d465339c2cfcd1bd0bbf3cbbe475fc68 /nginx/snippets
parent71be7342ab86d32da1638ac3c6352af0e3bf9a1b (diff)
certbot-ocsp-fetcher for reliable OCSP stapling
Diffstat (limited to 'nginx/snippets')
-rw-r--r--nginx/snippets/https.conf2
1 files changed, 2 insertions, 0 deletions
diff --git a/nginx/snippets/https.conf b/nginx/snippets/https.conf
index 290a1e95..a721e373 100644
--- a/nginx/snippets/https.conf
+++ b/nginx/snippets/https.conf
@@ -9,3 +9,5 @@ ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;
ssl_stapling on;
ssl_stapling_verify on;
+# maintained by certbot-ocsp-fetcher
+ssl_stapling_file /etc/nginx/ocsp-cache/grapheneos.org.der;