Skip to content

Instantly share code, notes, and snippets.

@bradclawsie

bradclawsie/nginx ssl

Last active September 25, 2015 17:18
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bradclawsie/956560 to your computer and use it in GitHub Desktop.
Save bradclawsie/956560 to your computer and use it in GitHub Desktop.
Download ZIP
nginx ssl hardening highlights
Raw
nginx ssl
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:AES256-CGM-SHA256:ECDHE-RSA-AES256-SHA256:RC4:HIGH:!aNULL:!MD5:-LOW:-SSLv2:-EXP;
ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security "max-age=2592000; includeSubdomains";
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment