lingkai5wu
c323507de4
The origin certificate does not include an OCSP responder URL, causing nginx warnings. Comment out stapling directives until a proper certificate with OCSP support is deployed.
28 lines
608 B
Plaintext
28 lines
608 B
Plaintext
http2 on;
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_session_cache shared:SSL:10m;
|
|
ssl_session_timeout 10m;
|
|
ssl_session_tickets off;
|
|
|
|
# OCSP stapling requires certificates with an OCSP responder URL.
|
|
# Uncomment when the origin certificate supports it.
|
|
# ssl_stapling on;
|
|
# ssl_stapling_verify on;
|
|
# resolver 1.1.1.1 8.8.8.8 valid=300s;
|
|
# resolver_timeout 5s;
|
|
|
|
server {
|
|
listen 80 default_server;
|
|
listen [::]:80 default_server;
|
|
server_name _;
|
|
|
|
return 301 https://$host$request_uri;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl default_server;
|
|
listen [::]:443 ssl default_server;
|
|
|
|
ssl_reject_handshake on;
|
|
}
|