|
@@ -1,4 +1,5 @@
|
|
|
server_tokens off;
|
|
|
+
|
|
|
# includes to http {
|
|
|
proxy_cache_path /tmp levels=1:2 keys_zone=sogo:10m inactive=24h max_size=1g;
|
|
|
server_names_hash_bucket_size 64;
|
|
@@ -21,15 +22,17 @@ server {
|
|
|
ssl_prefer_server_ciphers on;
|
|
|
ssl_ciphers 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA';
|
|
|
|
|
|
- ssl_session_cache shared:SSL:50m;
|
|
|
- ssl_session_timeout 1d;
|
|
|
- ssl_session_tickets off;
|
|
|
+ add_header Strict-Transport-Security "max-age=15768000; includeSubDomains";
|
|
|
+
|
|
|
+ #ssl_session_cache shared:SSL:50m;
|
|
|
+ #ssl_session_timeout 1d;
|
|
|
+ #ssl_session_tickets off;
|
|
|
|
|
|
- add_header X-Frame-Options SAMEORIGIN;
|
|
|
- add_header X-Content-Type-Options nosniff;
|
|
|
- add_header X-XSS-Protection "1; mode=block";
|
|
|
- add_header Referrer-Policy: no-referrer-when-downgrade;
|
|
|
- add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload";
|
|
|
+ #add_header X-Frame-Options SAMEORIGIN;
|
|
|
+ #add_header X-Content-Type-Options nosniff;
|
|
|
+ #add_header X-XSS-Protection "1; mode=block";
|
|
|
+ #add_header Referrer-Policy: no-referrer-when-downgrade;
|
|
|
+ #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload";
|
|
|
|
|
|
ssl_ecdh_curve secp384r1;
|
|
|
index index.php index.html;
|