titanz/NGINX-Configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove unnecessary OCSP stapling config

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-09-26 07:26:02 -07:00 committed by GitHub
parent d2ea15b130
commit 3833fd16eb
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
etc/nginx/conf.d/tls.conf
View File

@ -19,13 +19,8 @@ ssl_session_ticket_key session-ticket-keys/3.key;
ssl_session_ticket_key session-ticket-keys/2.key; ssl_session_ticket_key session-ticket-keys/2.key;
ssl_session_ticket_key session-ticket-keys/1.key; ssl_session_ticket_key session-ticket-keys/1.key;
## Enable OCSP Stapling
## We will use GrapheneOS's OCSP Fetcher to get the stapling file: https://github.com/GrapheneOS/infrastructure/blob/main/certbot-ocsp-fetcher
ssl_stapling on;
ssl_stapling_verify on;
## The following settings need to be declared manually per vhost: ## The following settings need to be declared manually per vhost:
# ssl_certificate # ssl_certificate
# ssl_certificate_key # ssl_certificate_key
# ssl_trusted_certificate # ssl_trusted_certificate
# ssl_stapling_file # ssl_stapling_file