| @@ -232,8 +232,9 @@ matrix_nginx_proxy_reload_cron_time_definition: "20 4 */5 * *" | |||||
| # - https://ssl-config.mozilla.org/#server=nginx | # - https://ssl-config.mozilla.org/#server=nginx | ||||
| matrix_nginx_proxy_ssl_preset: "intermediate" | matrix_nginx_proxy_ssl_preset: "intermediate" | ||||
| # This are the presets as taken from Mozilla's Server Side TLS Recommended configurations | |||||
| # DO NOT modify this values and use `matrix_nginx_proxy_ssl_protocols` and `matrix_nginx_proxy_ssl_ciphers` | |||||
| # Presets are taken from Mozilla's Server Side TLS Recommended configurations | |||||
| # DO NOT modify these values and use `matrix_nginx_proxy_ssl_protocols`, `matrix_nginx_proxy_ssl_ciphers` and `matrix_nginx_proxy_ssl_ciphers` | |||||
| # if you wish to use something more custom. | |||||
| matrix_nginx_proxy_ssl_presets: | matrix_nginx_proxy_ssl_presets: | ||||
| modern: | modern: | ||||
| protocols: TLSv1.3 | protocols: TLSv1.3 | ||||
| @@ -250,20 +251,12 @@ matrix_nginx_proxy_ssl_presets: | |||||
| # Specifies which *SSL protocols* to use when serving all the various vhosts. | # Specifies which *SSL protocols* to use when serving all the various vhosts. | ||||
| # By default is set to "" and will use the protocols from the preset. If you set it to something different, it will override | |||||
| # the values from the preset | |||||
| matrix_nginx_proxy_ssl_protocols: "{{ matrix_nginx_proxy_ssl_presets[matrix_nginx_proxy_ssl_preset]['protocols'] }}" | matrix_nginx_proxy_ssl_protocols: "{{ matrix_nginx_proxy_ssl_presets[matrix_nginx_proxy_ssl_preset]['protocols'] }}" | ||||
| # Specifies whether to prefer *the client’s choice or the server’s choice* when | |||||
| # negociating the chipher to serve all the various vhost. | |||||
| # | |||||
| # By default is set to "" and will use the protocols from the preset. If you set it to something different, it will override | |||||
| # the values from the preset | |||||
| # Specifies whether to prefer *the client’s choice or the server’s choice* when negotiating ciphers. | |||||
| matrix_nginx_proxy_ssl_prefer_server_ciphers: "{{ matrix_nginx_proxy_ssl_presets[matrix_nginx_proxy_ssl_preset]['prefer_server_ciphers'] }}" | matrix_nginx_proxy_ssl_prefer_server_ciphers: "{{ matrix_nginx_proxy_ssl_presets[matrix_nginx_proxy_ssl_preset]['prefer_server_ciphers'] }}" | ||||
| # Specifies which *SSL Cipher suites* to use when serving all the various vhosts. | # Specifies which *SSL Cipher suites* to use when serving all the various vhosts. | ||||
| # By default is set to "" and will use the ciphers from the preset. If you set it to something different, it will override | |||||
| # the values from the preset. | |||||
| # To see the full list for suportes ciphers run `openssl ciphers` on your server | # To see the full list for suportes ciphers run `openssl ciphers` on your server | ||||
| matrix_nginx_proxy_ssl_ciphers: "{{ matrix_nginx_proxy_ssl_presets[matrix_nginx_proxy_ssl_preset]['ciphers'] }}" | matrix_nginx_proxy_ssl_ciphers: "{{ matrix_nginx_proxy_ssl_presets[matrix_nginx_proxy_ssl_preset]['ciphers'] }}" | ||||