senselab/ansible-role-apache
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Activity

Erweitere Apache-Konfiguration

Browse source
This commit is contained in:
phil 2021-07-28 09:56:47 +02:00
parent 3ea27a7426
commit c75ad08f1a
3 changed files with 19 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
files/add-headers.conf Normal file
View file

@ -0,0 +1 @@
Header always set Strict-Transport-Security "max-age=63072000"

10
files/ssl.conf Normal file
View file

@ -0,0 +1,10 @@
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
SSLHonorCipherOrder off
SSLCompression off
SSLSessionTickets off
SSLUseStapling on
SSLStaplingResponderTimeout 5
SSLStaplingReturnResponderErrors off
SSLStaplingCache shmcb:/var/run/ocsp(32768)
SSLOpenSSLConfCmd DHParameters /etc/ssl/dhparams.pem