File tree 1 file changed +23
-0
lines changed
1 file changed +23
-0
lines changed Original file line number Diff line number Diff line change
1
+ server {
2
+ listen 443 ssl default_server;
3
+ server_name yourdomain.org www.yourdomain.org;
4
+
5
+ # Load the ECDSA keys.
6
+ ssl_certificate /etc/letsencrypt/live/test-ecc/fullchain.pem;
7
+ ssl_certificate_key /etc/letsencrypt/live/test-ecc/privkey.pem;
8
+
9
+ # Load the RSA keys.
10
+ ssl_certificate /etc/letsencrypt/live/test-rsa/fullchain.pem;
11
+ ssl_certificate_key /etc/letsencrypt/live/test-rsa/privkey.pem;
12
+
13
+ # Load the Diffie-Hellman parameter.
14
+ ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
15
+
16
+ # Define the ciphers to use in the preferred order.
17
+ ssl_protocols TLSv1.2 TLSv1.3;
18
+ ssl_prefer_server_ciphers on;
19
+ ssl_ciphers "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:DHE+AESGCM:DHE:!RSA!aNULL:!eNULL:!LOW:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!CAMELLIA:!SEED";
20
+
21
+ return 200 'Let\'s Encrypt certificate successfully installed!';
22
+ add_header Content-Type text/plain;
23
+ }
You can’t perform that action at this time.
0 commit comments