freifunk/nginx
0
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Update postfixadmin ssl config

Browse source
This commit is contained in:
kpcyrd 2014-08-26 22:51:50 +02:00
parent 8ff42c1253
commit 9bc0fdded9
1 changed files with 6 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
sites-available/postfixadmin_ffhh
View file

@ -34,21 +34,13 @@ server {
ssl_certificate /etc/nginx/ssl/postfix_ssl/server.crt; ssl_certificate /etc/nginx/ssl/postfix_ssl/server.crt;
ssl_certificate_key /etc/nginx/ssl/postfix_ssl/server.key; ssl_certificate_key /etc/nginx/ssl/postfix_ssl/server.key;
# ssl_certificate /etc/nginx/ssl/ffhh.crt;
# ssl_certificate_key /etc/nginx/ssl/hamburg.freifunk.net.key;
ssl_session_timeout 5m;
#
# # NEW SETTINGS
# ssl_prefer_server_ciphers on;
# ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
# ssl_ciphers "EECDH+AESGCM EDH+AESGCM !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
# ssl_ciphers "EECDH+AESGCM EDH+AESGCM EECDH -RC4 EDH -CAMELLIA -SEED !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
#
# # OLD SETTINGS
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
# Only strong ciphers in PFS mode
ssl_ciphers ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
location ~ \.php$ { location ~ \.php$ {
fastcgi_pass unix:/var/run/php5-fpm.sock; fastcgi_pass unix:/var/run/php5-fpm.sock;