From 3e4ee0cb285a5e0a944edd24add2942229dceba9 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Wed, 1 Apr 2020 10:28:10 -0400 Subject: move nginx https setup into a snippet --- nginx/snippets/https.conf | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 nginx/snippets/https.conf (limited to 'nginx/snippets/https.conf') diff --git a/nginx/snippets/https.conf b/nginx/snippets/https.conf new file mode 100644 index 00000000..290a1e95 --- /dev/null +++ b/nginx/snippets/https.conf @@ -0,0 +1,11 @@ +listen 443 ssl http2; +listen [::]:443 ssl http2; + +ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; +ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; +include /etc/letsencrypt/options-ssl-nginx.conf; +ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + +ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem; +ssl_stapling on; +ssl_stapling_verify on; -- cgit v1.3.1