lingkai5wu/homelab-nginx-templates
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: disable OCSP stapling (origin cert lacks OCSP URI)

Browse Source 
The origin certificate does not include an OCSP responder URL,
causing nginx warnings. Comment out stapling directives until
a proper certificate with OCSP support is deployed.
This commit is contained in:
lingkai5wu committed 2026-10-12 13:20:42 +08:00
1 parent ac9e744692
commit c323507de4
1 file changed
+6 -4
Download Patch File Download Diff File Expand all files Collapse all files
conf.d/10-defaults.conf.template
+6 -4
View File
@@ -4,10 +4,12 @@ ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m; ssl_session_timeout 10m;
ssl_session_tickets off; ssl_session_tickets off;
ssl_stapling on; # OCSP stapling requires certificates with an OCSP responder URL.
ssl_stapling_verify on; # Uncomment when the origin certificate supports it.
resolver 1.1.1.1 8.8.8.8 valid=300s; # ssl_stapling on;
resolver_timeout 5s; # ssl_stapling_verify on;
# resolver 1.1.1.1 8.8.8.8 valid=300s;
# resolver_timeout 5s;
server { server {
listen 80 default_server; listen 80 default_server;