Update nginx/nginx.conf

This commit is contained in:
Minecon724 2025-01-08 12:31:32 +01:00
parent a911072084
commit 48feeaa88f

View file

@ -47,7 +47,7 @@ http {
ssl_prefer_server_ciphers off;
# Make sure to generate it first
ssl_dhparam /etc/ssl/dhparam.pem;
ssl_dhparam dhparam.pem;
# OCSP stapling
ssl_stapling on;
@ -55,7 +55,7 @@ http {
# replace with the IP address of your resolver;
# async 'resolver' is important for proper operation of OCSP stapling
resolver 2001:4860:4860::8888 2001:4860:4860::8844;
resolver [2001:4860:4860::8888] [2001:4860:4860::8844];
# If certificates are marked OCSP Must-Staple, consider managing the
# OCSP stapling cache with an external script, e.g. certbot-ocsp-fetcher