diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2020-04-05 04:13:05 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2020-04-05 04:13:05 -0400 |
| commit | ef179138fa5d4cc89127a114ebeac12f1278bbfa (patch) | |
| tree | 08155b90d465339c2cfcd1bd0bbf3cbbe475fc68 /nginx | |
| parent | 71be7342ab86d32da1638ac3c6352af0e3bf9a1b (diff) | |
certbot-ocsp-fetcher for reliable OCSP stapling
Diffstat (limited to 'nginx')
| -rw-r--r-- | nginx/snippets/https.conf | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/nginx/snippets/https.conf b/nginx/snippets/https.conf index 290a1e95..a721e373 100644 --- a/nginx/snippets/https.conf +++ b/nginx/snippets/https.conf @@ -9,3 +9,5 @@ ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem; ssl_stapling on; ssl_stapling_verify on; +# maintained by certbot-ocsp-fetcher +ssl_stapling_file /etc/nginx/ocsp-cache/grapheneos.org.der; |