From ee41383f6108ac841e1b253322b623034849a524 Mon Sep 17 00:00:00 2001
From: Holger Weiss <holger@zedat.fu-berlin.de>
Date: Wed, 16 Sep 2015 15:23:44 +0200
Subject: Use custom DH parameters and limit TLS ciphers

---
 etc/nginx.conf | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'etc/nginx.conf')

diff --git a/etc/nginx.conf b/etc/nginx.conf
index 431092a..ee815d3 100644
--- a/etc/nginx.conf
+++ b/etc/nginx.conf
@@ -9,6 +9,12 @@
 # 	http://wiki.nginx.org/Configuration
 #
 
+#
+# TLS configuration.
+#
+ssl_ciphers HIGH:!aNULL:!MD5:!3DES:!SSLv2:@STRENGTH;
+ssl_dhparam /home/plugins/etc/ssl/dh-parameters.pem;
+
 #
 # Server definition for <https://www.monitoring-plugins.org/>.
 #
-- 
cgit v1.2.3-74-g34f1