|
|
|
@@ -232,8 +232,9 @@ matrix_nginx_proxy_reload_cron_time_definition: "20 4 */5 * *" |
|
|
|
# - https://ssl-config.mozilla.org/#server=nginx |
|
|
|
matrix_nginx_proxy_ssl_preset: "intermediate" |
|
|
|
|
|
|
|
# This are the presets as taken from Mozilla's Server Side TLS Recommended configurations |
|
|
|
# DO NOT modify this values and use `matrix_nginx_proxy_ssl_protocols` and `matrix_nginx_proxy_ssl_ciphers` |
|
|
|
# Presets are taken from Mozilla's Server Side TLS Recommended configurations |
|
|
|
# DO NOT modify these values and use `matrix_nginx_proxy_ssl_protocols`, `matrix_nginx_proxy_ssl_ciphers` and `matrix_nginx_proxy_ssl_ciphers` |
|
|
|
# if you wish to use something more custom. |
|
|
|
matrix_nginx_proxy_ssl_presets: |
|
|
|
modern: |
|
|
|
protocols: TLSv1.3 |
|
|
|
@@ -250,20 +251,12 @@ matrix_nginx_proxy_ssl_presets: |
|
|
|
|
|
|
|
|
|
|
|
# Specifies which *SSL protocols* to use when serving all the various vhosts. |
|
|
|
# By default is set to "" and will use the protocols from the preset. If you set it to something different, it will override |
|
|
|
# the values from the preset |
|
|
|
matrix_nginx_proxy_ssl_protocols: "{{ matrix_nginx_proxy_ssl_presets[matrix_nginx_proxy_ssl_preset]['protocols'] }}" |
|
|
|
|
|
|
|
# Specifies whether to prefer *the client’s choice or the server’s choice* when |
|
|
|
# negociating the chipher to serve all the various vhost. |
|
|
|
# |
|
|
|
# By default is set to "" and will use the protocols from the preset. If you set it to something different, it will override |
|
|
|
# the values from the preset |
|
|
|
# Specifies whether to prefer *the client’s choice or the server’s choice* when negotiating ciphers. |
|
|
|
matrix_nginx_proxy_ssl_prefer_server_ciphers: "{{ matrix_nginx_proxy_ssl_presets[matrix_nginx_proxy_ssl_preset]['prefer_server_ciphers'] }}" |
|
|
|
|
|
|
|
# Specifies which *SSL Cipher suites* to use when serving all the various vhosts. |
|
|
|
# By default is set to "" and will use the ciphers from the preset. If you set it to something different, it will override |
|
|
|
# the values from the preset. |
|
|
|
# To see the full list for suportes ciphers run `openssl ciphers` on your server |
|
|
|
matrix_nginx_proxy_ssl_ciphers: "{{ matrix_nginx_proxy_ssl_presets[matrix_nginx_proxy_ssl_preset]['ciphers'] }}" |
|
|
|
|
|
|
|
|