Oli
e376193480
This commit removes the Nginx configuration options related to OCSP stapling and OCSP Must-Staple. Let's Encrypt is discontinuing OCSP support in favor of CRLs (Certificate Revocation Lists) to improve privacy and simplify infrastructure.
14 lines
371 B
Django/Jinja
14 lines
371 B
Django/Jinja
## Managed by Ansible ##
|
|
|
|
# Configure SSL
|
|
ssl_ciphers "{{ nginx_ssl_ciphers }}";
|
|
ssl_protocols {{ nginx_ssl_protocols }};
|
|
ssl_prefer_server_ciphers off;
|
|
ssl_early_data on;
|
|
ssl_dhparam {{ nginx_ssl_dhparam }};
|
|
# SSL session handling
|
|
ssl_session_cache shared:SSL:10m;
|
|
ssl_session_timeout 1d;
|
|
ssl_session_tickets off;
|
|
ssl_buffer_size 4k;
|