Skip to content

Commit a33a64a

Browse files
authored
Update nginx.conf
1 parent d0c8408 commit a33a64a

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

conf/nginx.conf

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,14 +46,14 @@ http {
4646

4747
# modern configuration
4848
ssl_protocols TLSv1.2 TLSv1.3;
49-
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
49+
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
5050
ssl_ecdh_curve X25519:P-256:P-384;
5151
ssl_prefer_server_ciphers on;
5252

5353
# OCSP Stapling
5454
ssl_stapling on;
5555
ssl_stapling_verify on;
56-
resolver 1.1.1.1 1.0.0.1 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=60s;
56+
resolver 1.1.1.1 223.5.5.5 208.67.222.222 208.67.220.220 valid=60s;
5757
resolver_timeout 2s;
5858

5959
server_names_hash_bucket_size 128;

0 commit comments

Comments
 (0)