diff options
Diffstat (limited to 'spring-front/nginx.conf')
| -rw-r--r-- | spring-front/nginx.conf | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/spring-front/nginx.conf b/spring-front/nginx.conf index 9d6d5c1..cea4a92 100644 --- a/spring-front/nginx.conf +++ b/spring-front/nginx.conf @@ -4,7 +4,7 @@ events { http { include /etc/nginx/mime.types; server_tokens off; - limit_req_zone $binary_remote_addr zone=one:10m rate=30r/m; + limit_req_zone $binary_remote_addr zone=one:10m rate=30r/m; server { listen 443 ssl http2; keepalive_timeout 60; @@ -13,6 +13,10 @@ http { ssl_certificate_key /certs/server.key; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers HIGH:!aNULL:!MD5; + ssl_session_cache shared:SSL:50m; + ssl_session_timeout 1d; + ssl_session_tickets off; + ssl_prefer_server_ciphers on; sendfile on; tcp_nopush on; add_header X-Content-Type-Options "nosniff" always; @@ -21,6 +25,10 @@ http { add_header X-Frame-Options SAMEORIGIN always; add_header X-XSS-Protection "1; mode=block" always; fastcgi_hide_header X-Powered-By; + resolver 9.9.9.9 208.67.222.222; + ssl_stapling on; + ssl_stapling_verify on; + ssl_trusted_certificate /certs/server.cert; error_page 401 403 404 /404.html; location / { root /usr/share/nginx/html; |