aboutsummaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authornodiscc <nodiscc@gmail.com>2020-05-18 21:08:51 +0200
committernodiscc <nodiscc@gmail.com>2020-09-12 14:31:45 +0200
commit778add2c9cc858bcc1aa8180620bd46590b84e15 (patch)
tree0112f4c457f934e9b5f9750641a165eda4f13ea1
parent538fb324a8a8d57b7b06e30dfe2310137918f844 (diff)
downloadShaarli-778add2c9cc858bcc1aa8180620bd46590b84e15.tar.gz
Shaarli-778add2c9cc858bcc1aa8180620bd46590b84e15.tar.zst
Shaarli-778add2c9cc858bcc1aa8180620bd46590b84e15.zip
doc: nginx: add let's encrypt ssl configuration
-rw-r--r--doc/md/Server-configuration.md8
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/md/Server-configuration.md b/doc/md/Server-configuration.md
index 2bb403e5..6e21de91 100644
--- a/doc/md/Server-configuration.md
+++ b/doc/md/Server-configuration.md
@@ -250,6 +250,14 @@ server {
250 ssl_certificate /etc/ssl/shaarli.mydomain.org.crt; 250 ssl_certificate /etc/ssl/shaarli.mydomain.org.crt;
251 ssl_certificate_key /etc/ssl/private/shaarli.mydomain.org.key; 251 ssl_certificate_key /etc/ssl/private/shaarli.mydomain.org.key;
252 252
253 # Let's Encrypt SSL settings from https://github.com/certbot/certbot/blob/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf
254 ssl_session_cache shared:le_nginx_SSL:10m;
255 ssl_session_timeout 1440m;
256 ssl_session_tickets off;
257 ssl_protocols TLSv1.2 TLSv1.3;
258 ssl_prefer_server_ciphers off;
259 ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
260
253 # increase the maximum file upload size if needed: by default nginx limits file upload to 1MB (413 Entity Too Large error) 261 # increase the maximum file upload size if needed: by default nginx limits file upload to 1MB (413 Entity Too Large error)
254 client_max_body_size 100m; 262 client_max_body_size 100m;
255 263