thomas
/
sovereign
Watch 1
Star 0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
No Description
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1073 Commits
1 Branch
Tree: 37dd16fb67
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '37dd16fb67'
${ noResults }
sovereign/roles/sslselfsigned/templates/etc_apache2_conf-available_...

etc_apache2_conf-available_ssl.conf.j2 990B
History Raw

1234567891011121314 
  1. SSLProtocol ALL -SSLv2 -SSLv3

  2. SSLHonorCipherOrder On

  3. SSLCompression off

  4. SSLUseStapling On

  5. SSLStaplingCache shmcb:${APACHE_RUN_DIR}/stapling_cache(128000)

  6. SSLStaplingResponderTimeout 5

  7. SSLStaplingReturnResponderErrors off

  8. 

  9. SSLCertificateKeyFile	/etc/letsencrypt/live/{{ domain }}/privkey.pem

  10. SSLCertificateFile	/etc/letsencrypt/live/{{ domain }}/fullchain.pem

  11. 

  12. SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK

  13. 

  14. Header add Strict-Transport-Security "max-age=15768000; includeSubdomains"