-
Notifications
You must be signed in to change notification settings - Fork 384
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fixes #1711 : SSL support through Let's Encrypt added
- Loading branch information
1 parent
8c77eb9
commit adf2a79
Showing
2 changed files
with
37 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,18 @@ | ||
listen 443 ssl; | ||
|
||
ssl_certificate /etc/nginx/ssl/restya.com.crt; | ||
ssl_certificate_key /etc/nginx/ssl/restya.com.key; | ||
|
||
ssl_session_cache shared:SSL:1m; | ||
ssl_session_timeout 15m; | ||
|
||
# Set system wide SSL settings | ||
ssl_prefer_server_ciphers on; | ||
ssl_protocols TLSv1.2 TLSv1.1 TLSv1; | ||
|
||
#Forward Secrecy | ||
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"; | ||
|
||
if ($scheme = 'http') { | ||
rewrite ^/(.*)$ https://restya.com/$1 permanent; | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters