diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 0c2d87c..a68d36a 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -47,7 +47,7 @@ http { ssl_prefer_server_ciphers off; # Make sure to generate it first - ssl_dhparam /etc/ssl/dhparam.pem; + ssl_dhparam dhparam.pem; # OCSP stapling ssl_stapling on; @@ -55,7 +55,7 @@ http { # replace with the IP address of your resolver; # async 'resolver' is important for proper operation of OCSP stapling - resolver 2001:4860:4860::8888 2001:4860:4860::8844; + resolver [2001:4860:4860::8888] [2001:4860:4860::8844]; # If certificates are marked OCSP Must-Staple, consider managing the # OCSP stapling cache with an external script, e.g. certbot-ocsp-fetcher