diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2021-04-23 16:30:49 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2021-04-23 16:31:17 -0400 |
| commit | f3320a54d12e404e722a8af2493a7ea94571eb1f (patch) | |
| tree | b2458cbd0f14cbcd3ebbc285b4ba2b5e9fe0cb64 /nginx | |
| parent | 59cbca708399a6b81cd6c6d9f26fd760cb25f2a6 (diff) | |
prefer ChaCha20 for clients without hardware AES
Diffstat (limited to 'nginx')
| -rw-r--r-- | nginx/nginx.conf | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 9124b498..aed7aed2 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -43,6 +43,7 @@ http { ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256; ssl_prefer_server_ciphers on; + ssl_conf_command Options PrioritizeChaCha; ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; |