We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 26e7649 commit eba7d8aCopy full SHA for eba7d8a
nginx.tmpl
@@ -25,7 +25,8 @@
25
{{ define "ssl_policy" }}
26
{{ if eq .ssl_policy "Mozilla-Modern" }}
27
ssl_protocols TLSv1.3;
28
- {{/* ssl_ciphers is undefined in the Mozilla-Modern policy /*}}
+ {{/* nginx currently lacks ability to choose ciphers in TLS 1.3 in configuration, see https://trac.nginx.org/nginx/ticket/1529 /*}}
29
+ {{/* a possible workaround can be modify /etc/ssl/openssl.cnf to change it globally (see https://trac.nginx.org/nginx/ticket/1529#comment:12 ) /*}}
30
{{/* explicitly set ngnix default value in order to allow single servers to override the global http value */}}
31
ssl_ciphers HIGH:!aNULL:!MD5;
32
ssl_prefer_server_ciphers off;
0 commit comments