From cf108569dc9298b37c48689edd8086b13cb69366 Mon Sep 17 00:00:00 2001 From: vincent Date: Fri, 1 Apr 2022 09:39:29 +0200 Subject: [PATCH] update path dhcparam --- templates/nginx_ssl_config.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/nginx_ssl_config.j2 b/templates/nginx_ssl_config.j2 index 775bba0..e42aae0 100644 --- a/templates/nginx_ssl_config.j2 +++ b/templates/nginx_ssl_config.j2 @@ -6,5 +6,5 @@ ssl_session_tickets off; ssl_protocols TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers off; ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"; -ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; +ssl_dhparam /etc/ssl/{{ nginx_ssl_cert_name]}}/ssl-dhparams.pem; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;